81fd2e98714f3feef66cf597f20b3c4ca55cdbcb7407fa01c2ccb07377a9aba328e85136efbc8566d1dd85e4172e19c5032e52e2180b645ed03041205d19b93987e6f2517cfb6824b07a77dfa784526546116d590911d0213c51dcd35ac7c42730bb3a34f21dfb183c9e6a849af0646287a9b5d00"/266], 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 00:03:20 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) [ 200.175796][ T7037] FAULT_INJECTION: forcing a failure. [ 200.175796][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 200.183287][ T7040] process 'syz-executor.5' launched '/dev/fd/3' with NULL argv: empty string added 00:03:20 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x890c, 0x0) [ 200.199346][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 200.204167][ T7037] CPU: 1 PID: 7037 Comm: syz-executor.3 Not tainted 6.6.0-rc4-syzkaller-g19af4a4ed414 #0 [ 200.206927][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 200.209781][ T7037] Call trace: [ 200.210679][ T7037] dump_backtrace+0x1b8/0x1e4 [ 200.211938][ T7037] show_stack+0x2c/0x44 [ 200.213071][ T7037] dump_stack_lvl+0xd0/0x124 [ 200.214346][ T7037] dump_stack+0x1c/0x28 [ 200.215453][ T7037] should_fail_ex+0x3f8/0x5c4 [ 200.216739][ T7037] __should_failslab+0xc8/0x128 [ 200.218067][ T7037] should_failslab+0x10/0x28 [ 200.219366][ T7037] __kmem_cache_alloc_node+0x80/0x37c [ 200.220846][ T7037] __kmalloc_node+0xc0/0x1c4 [ 200.222129][ T7037] __vmalloc_node_range+0x44c/0xebc [ 200.223523][ T7037] vzalloc+0xb4/0xdc [ 200.224604][ T7037] bpf_check+0x1f4/0xf6a4 [ 200.225815][ T7037] bpf_prog_load+0xfa0/0x16c8 [ 200.227119][ T7037] __sys_bpf+0x2ac/0x5dc [ 200.228342][ T7037] __arm64_sys_bpf+0x80/0x98 [ 200.229596][ T7037] invoke_syscall+0x98/0x2b8 [ 200.230825][ T7037] el0_svc_common+0x130/0x23c [ 200.232121][ T7037] do_el0_svc+0x48/0x58 [ 200.233287][ T7037] el0_svc+0x58/0x16c [ 200.234374][ T7037] el0t_64_sync_handler+0x84/0xfc [ 200.235836][ T7037] el0t_64_sync+0x190/0x194 00:03:20 executing program 5: memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0r0, 0x80000}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000240)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}}, 0x0) [ 201.344484][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 201.363856][ T7161] FAULT_INJECTION: forcing a failure. [ 201.363856][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 201.367374][ T7161] CPU: 0 PID: 7161 Comm: syz-executor.3 Not tainted 6.6.0-rc4-syzkaller-g19af4a4ed414 #0 00:03:21 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 201.370098][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 201.372812][ T7161] Call trace: [ 201.373735][ T7161] dump_backtrace+0x1b8/0x1e4 [ 201.375029][ T7161] show_stack+0x2c/0x44 [ 201.376271][ T7161] dump_stack_lvl+0xd0/0x124 [ 201.377557][ T7161] dump_stack+0x1c/0x28 [ 201.378686][ T7161] should_fail_ex+0x3f8/0x5c4 [ 201.380058][ T7161] __should_failslab+0xc8/0x128 [ 201.381495][ T7161] should_failslab+0x10/0x28 [ 201.382797][ T7161] __kmem_cache_alloc_node+0x80/0x37c [ 201.384305][ T7161] __kmalloc_node+0xc0/0x1c4 [ 201.385649][ T7161] kvmalloc_node+0x84/0x1c8 [ 201.386975][ T7161] check_cfg+0xdc/0xf58 [ 201.388190][ T7161] bpf_check+0xb1b8/0xf6a4 [ 201.389457][ T7161] bpf_prog_load+0xfa0/0x16c8 [ 201.390772][ T7161] __sys_bpf+0x2ac/0x5dc [ 201.391969][ T7161] __arm64_sys_bpf+0x80/0x98 [ 201.393340][ T7161] invoke_syscall+0x98/0x2b8 [ 201.394645][ T7161] el0_svc_common+0x130/0x23c [ 201.395992][ T7161] do_el0_svc+0x48/0x58 [ 201.397195][ T7161] el0_svc+0x58/0x16c [ 201.398354][ T7161] el0t_64_sync_handler+0x84/0xfc [ 201.399745][ T7161] el0t_64_sync+0x190/0x194 00:03:21 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) 00:03:21 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="180200000000983e0000000000000000850000002a00000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb3d8f0a456c3a6cfd127800000000f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a4807500800000000000001dee601e7d3a21050eace30d512a5972b6a5eb20f4d11db1780a4165917e6cc493b0265519fee4cb1b8b93f0b151770fd40c7a8060cea3f15b2f829b7ae29509523a4e5195c57b62a54b1ed9ed07f31b17bff8c9441a45fd000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000100)={@broadcast, @dev={0xac, 0x14, 0x14, 0x11}, 0xffffffffffffffff, "b756e774b29fe751a126bdd2523f76de2a072073aabce7aa8acd11c98d741b5b", 0x5, 0x5, 0x5e36, 0xffffffff}, 0x3c) syz_emit_ethernet(0x11, &(0x7f0000000600)={@random="e85214c09548", @empty, @void, {@llc={0x4, {@llc={0x0, 0x0, 'N'}}}}}, 0x0) [ 201.405649][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 201.407792][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 201.424249][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 20) 00:03:21 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x400448c9, 0x0) [ 201.459938][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 201.462191][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 201.464471][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 201.466687][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 201.472489][ T7171] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 201.477288][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 201.480105][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 00:03:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000500000000000900020073797a300000000011000300686173683a69702c706f72740000000005000100060000000700000008001200000000000500040000000000"], 0x58}, 0x1, 0x0, 0x0, 0x450c0}, 0x0) (async, rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x50, r0, 0x80000}) (rerun: 32) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000240)) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}}, 0x0) 00:03:21 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) [ 201.501453][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:21 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 201.503893][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 00:03:21 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) [ 201.513325][ T7173] FAULT_INJECTION: forcing a failure. [ 201.513325][ T7173] name failslab, interval 1, probability 0, space 0, times 0 [ 201.527738][ T7173] CPU: 1 PID: 7173 Comm: syz-executor.3 Not tainted 6.6.0-rc4-syzkaller-g19af4a4ed414 #0 [ 201.530612][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 201.533324][ T7173] Call trace: [ 201.534133][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 201.534229][ T7173] dump_backtrace+0x1b8/0x1e4 [ 201.536745][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 201.537586][ T7173] show_stack+0x2c/0x44 [ 201.537604][ T7173] dump_stack_lvl+0xd0/0x124 [ 201.537620][ T7173] dump_stack+0x1c/0x28 [ 201.543172][ T7173] should_fail_ex+0x3f8/0x5c4 [ 201.544472][ T7173] __should_failslab+0xc8/0x128 [ 201.545794][ T7173] should_failslab+0x10/0x28 [ 201.547015][ T7173] __kmem_cache_alloc_node+0x80/0x37c [ 201.548483][ T7173] __kmalloc_node+0xc0/0x1c4 [ 201.549733][ T7173] kvmalloc_node+0x84/0x1c8 [ 201.551001][ T7173] check_cfg+0xdc/0xf58 [ 201.552131][ T7173] bpf_check+0xb1b8/0xf6a4 [ 201.553369][ T7173] bpf_prog_load+0xfa0/0x16c8 [ 201.554608][ T7173] __sys_bpf+0x2ac/0x5dc [ 201.555793][ T7173] __arm64_sys_bpf+0x80/0x98 [ 201.557066][ T7173] invoke_syscall+0x98/0x2b8 [ 201.558295][ T7173] el0_svc_common+0x130/0x23c [ 201.559600][ T7173] do_el0_svc+0x48/0x58 [ 201.560723][ T7173] el0_svc+0x58/0x16c [ 201.561833][ T7173] el0t_64_sync_handler+0x84/0xfc [ 201.563251][ T7173] el0t_64_sync+0x190/0x194 [ 201.571095][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 201.573598][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 201.574546][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 201.576029][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 201.579768][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 201.585019][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:21 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x0, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) 00:03:21 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x400448dd, 0x0) 00:03:21 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="180200000000983e0000000000000000850000002a00000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb3d8f0a456c3a6cfd127800000000f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a4807500800000000000001dee601e7d3a21050eace30d512a5972b6a5eb20f4d11db1780a4165917e6cc493b0265519fee4cb1b8b93f0b151770fd40c7a8060cea3f15b2f829b7ae29509523a4e5195c57b62a54b1ed9ed07f31b17bff8c9441a45fd000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1}, 0x10) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000100)={@broadcast, @dev={0xac, 0x14, 0x14, 0x11}, 0xffffffffffffffff, "b756e774b29fe751a126bdd2523f76de2a072073aabce7aa8acd11c98d741b5b", 0x5, 0x5, 0x5e36, 0xffffffff}, 0x3c) (async) syz_emit_ethernet(0x11, &(0x7f0000000600)={@random="e85214c09548", @empty, @void, {@llc={0x4, {@llc={0x0, 0x0, 'N'}}}}}, 0x0) 00:03:21 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 21) [ 201.614535][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 201.617535][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 201.620450][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 201.622550][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 201.624843][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 201.627584][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 201.631029][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 201.633664][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 201.640410][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:21 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 201.653649][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 00:03:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000500000000000900020073797a300000000011000300686173683a69702c706f72740000000005000100060000000700000008001200000000000500040000000000"], 0x58}, 0x1, 0x0, 0x0, 0x450c0}, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x50, r0, 0x80000}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000240)) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}}, 0x0) (rerun: 32) 00:03:21 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="180200000000983e0000000000000000850000002a00000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb3d8f0a456c3a6cfd127800000000f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a4807500800000000000001dee601e7d3a21050eace30d512a5972b6a5eb20f4d11db1780a4165917e6cc493b0265519fee4cb1b8b93f0b151770fd40c7a8060cea3f15b2f829b7ae29509523a4e5195c57b62a54b1ed9ed07f31b17bff8c9441a45fd000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000100)={@broadcast, @dev={0xac, 0x14, 0x14, 0x11}, 0xffffffffffffffff, "b756e774b29fe751a126bdd2523f76de2a072073aabce7aa8acd11c98d741b5b", 0x5, 0x5, 0x5e36, 0xffffffff}, 0x3c) syz_emit_ethernet(0x11, &(0x7f0000000600)={@random="e85214c09548", @empty, @void, {@llc={0x4, {@llc={0x0, 0x0, 'N'}}}}}, 0x0) 00:03:21 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x400454ca, 0x0) 00:03:21 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x0, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) [ 201.726986][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 201.729342][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:21 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x40049409, 0x0) [ 201.734978][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 201.737537][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:21 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x98, 0x1eee061f) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x88, 0x32, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1a}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 00:03:21 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x0, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) 00:03:21 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 201.765652][ T7207] FAULT_INJECTION: forcing a failure. [ 201.765652][ T7207] name failslab, interval 1, probability 0, space 0, times 0 00:03:21 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000340)='syzkaller\x00'}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) r3 = memfd_secret(0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x4, 0xfffffffffffffddb, 0x1f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000180)=""/247, 0xf7) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @jmp={0x5, 0x0, 0xd, 0x6, 0x8, 0x80, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x6c}, @alu={0x7, 0x1, 0xc, 0x3, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff1}]}, &(0x7f0000000080)='syzkaller\x00', 0xbbe5, 0x42, &(0x7f00000000c0)=""/66, 0x40f00, 0x10, '\x00', 0x0, 0x2b, r1, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xd, 0x7, 0x40}, 0x10, 0x0, r0, 0x2, &(0x7f0000000240)=[r2, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff], &(0x7f0000000280)=[{0x1, 0x5, 0xd, 0xc}, {0x5, 0x5, 0xa, 0x9}], 0x10, 0x6}, 0x90) [ 201.788498][ T7207] CPU: 1 PID: 7207 Comm: syz-executor.3 Not tainted 6.6.0-rc4-syzkaller-g19af4a4ed414 #0 [ 201.791244][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 201.793913][ T7207] Call trace: [ 201.794847][ T7207] dump_backtrace+0x1b8/0x1e4 [ 201.796158][ T7207] show_stack+0x2c/0x44 [ 201.797265][ T7207] dump_stack_lvl+0xd0/0x124 [ 201.798492][ T7207] dump_stack+0x1c/0x28 [ 201.799679][ T7207] should_fail_ex+0x3f8/0x5c4 [ 201.800953][ T7207] __should_failslab+0xc8/0x128 [ 201.802255][ T7207] should_failslab+0x10/0x28 [ 201.803492][ T7207] __kmem_cache_alloc_node+0x80/0x37c [ 201.804944][ T7207] __kmalloc_node+0xc0/0x1c4 [ 201.806225][ T7207] kvmalloc_node+0x84/0x1c8 [ 201.807466][ T7207] check_cfg+0x124/0xf58 [ 201.808620][ T7207] bpf_check+0xb1b8/0xf6a4 [ 201.809893][ T7207] bpf_prog_load+0xfa0/0x16c8 [ 201.811151][ T7207] __sys_bpf+0x2ac/0x5dc [ 201.812346][ T7207] __arm64_sys_bpf+0x80/0x98 [ 201.813606][ T7207] invoke_syscall+0x98/0x2b8 [ 201.814835][ T7207] el0_svc_common+0x130/0x23c [ 201.816058][ T7207] do_el0_svc+0x48/0x58 [ 201.817178][ T7207] el0_svc+0x58/0x16c [ 201.818273][ T7207] el0t_64_sync_handler+0x84/0xfc [ 201.819645][ T7207] el0t_64_sync+0x190/0x194 [ 201.826823][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 201.831193][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 201.834040][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 201.839693][ T7215] syz-executor.5 (7215): drop_caches: 4 [ 201.840053][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 201.848375][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 00:03:21 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x40086602, 0x0) 00:03:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 22) 00:03:21 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:21 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x0, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) 00:03:21 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x98, 0x1eee061f) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x88, 0x32, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1a}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 00:03:21 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000340)='syzkaller\x00'}, 0x90) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (rerun: 32) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) r3 = memfd_secret(0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x4, 0xfffffffffffffddb, 0x1f}) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000180)=""/247, 0xf7) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @jmp={0x5, 0x0, 0xd, 0x6, 0x8, 0x80, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x6c}, @alu={0x7, 0x1, 0xc, 0x3, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff1}]}, &(0x7f0000000080)='syzkaller\x00', 0xbbe5, 0x42, &(0x7f00000000c0)=""/66, 0x40f00, 0x10, '\x00', 0x0, 0x2b, r1, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xd, 0x7, 0x40}, 0x10, 0x0, r0, 0x2, &(0x7f0000000240)=[r2, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff], &(0x7f0000000280)=[{0x1, 0x5, 0xd, 0xc}, {0x5, 0x5, 0xa, 0x9}], 0x10, 0x6}, 0x90) (rerun: 32) [ 201.943332][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 201.945371][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 00:03:21 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x40186366, 0x0) [ 201.956621][ T7226] FAULT_INJECTION: forcing a failure. [ 201.956621][ T7226] name failslab, interval 1, probability 0, space 0, times 0 [ 201.961757][ T7226] CPU: 0 PID: 7226 Comm: syz-executor.3 Not tainted 6.6.0-rc4-syzkaller-g19af4a4ed414 #0 [ 201.964459][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 201.967095][ T7226] Call trace: [ 201.967966][ T7226] dump_backtrace+0x1b8/0x1e4 [ 201.969189][ T7226] show_stack+0x2c/0x44 [ 201.970357][ T7226] dump_stack_lvl+0xd0/0x124 [ 201.971620][ T7226] dump_stack+0x1c/0x28 [ 201.972807][ T7226] should_fail_ex+0x3f8/0x5c4 [ 201.974063][ T7226] __should_failslab+0xc8/0x128 [ 201.975375][ T7226] should_failslab+0x10/0x28 [ 201.976619][ T7226] __kmem_cache_alloc_node+0x80/0x37c [ 201.978018][ T7226] __kmalloc_node+0xc0/0x1c4 [ 201.979266][ T7226] kvmalloc_node+0x84/0x1c8 [ 201.980499][ T7226] check_cfg+0xdc/0xf58 [ 201.981650][ T7226] bpf_check+0xb1b8/0xf6a4 [ 201.982854][ T7226] bpf_prog_load+0xfa0/0x16c8 [ 201.984083][ T7226] __sys_bpf+0x2ac/0x5dc [ 201.985200][ T7226] __arm64_sys_bpf+0x80/0x98 [ 201.986455][ T7226] invoke_syscall+0x98/0x2b8 00:03:21 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x0, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) [ 201.987673][ T7226] el0_svc_common+0x130/0x23c [ 201.988910][ T7226] do_el0_svc+0x48/0x58 [ 201.990023][ T7226] el0_svc+0x58/0x16c [ 201.991155][ T7226] el0t_64_sync_handler+0x84/0xfc [ 201.992556][ T7226] el0t_64_sync+0x190/0x194 [ 201.997745][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 202.000834][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 202.000899][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:22 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x401c5820, 0x0) 00:03:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 202.001041][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:22 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) (async) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x98, 0x1eee061f) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x88, 0x32, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1a}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) [ 202.036466][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 202.036499][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 00:03:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 23) [ 202.085456][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 202.088987][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 202.091254][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 202.091398][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:22 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x0, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) 00:03:22 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x4020940d, 0x0) 00:03:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 202.143624][ T7247] FAULT_INJECTION: forcing a failure. [ 202.143624][ T7247] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:03:22 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000340)='syzkaller\x00'}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) r3 = memfd_secret(0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x4, 0xfffffffffffffddb, 0x1f}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000180)=""/247, 0xf7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @jmp={0x5, 0x0, 0xd, 0x6, 0x8, 0x80, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x6c}, @alu={0x7, 0x1, 0xc, 0x3, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff1}]}, &(0x7f0000000080)='syzkaller\x00', 0xbbe5, 0x42, &(0x7f00000000c0)=""/66, 0x40f00, 0x10, '\x00', 0x0, 0x2b, r1, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xd, 0x7, 0x40}, 0x10, 0x0, r0, 0x2, &(0x7f0000000240)=[r2, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff], &(0x7f0000000280)=[{0x1, 0x5, 0xd, 0xc}, {0x5, 0x5, 0xa, 0x9}], 0x10, 0x6}, 0x90) 00:03:22 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x80086301, 0x0) [ 202.172822][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 202.174329][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 202.175042][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 202.177114][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 202.182798][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 202.186609][ T7247] CPU: 0 PID: 7247 Comm: syz-executor.3 Not tainted 6.6.0-rc4-syzkaller-g19af4a4ed414 #0 [ 202.189294][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 202.192005][ T7247] Call trace: [ 202.192838][ T7247] dump_backtrace+0x1b8/0x1e4 [ 202.194111][ T7247] show_stack+0x2c/0x44 00:03:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000008c0)=""/145}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x101, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/150, 0x96}], 0x1, 0x81, 0x0) r5 = openat$incfs(r2, &(0x7f0000000880)='.pending_reads\x00', 0x80, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000040), &(0x7f0000000140)=""/72}, 0x20) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000040), &(0x7f0000000140)=""/72}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)='syzkaller\x00', 0x1ff, 0x1e, &(0x7f0000000380)=""/30, 0x41000, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000003c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x7, 0x14dd, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[r5, r6, r7, r2, r8, r2, r2, r1]}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010e00"/20, @ANYRES32=0x0, @ANYBLOB="00005c0f00002000"], 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x24980000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x631}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x24004802) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0xa, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) [ 202.195272][ T7247] dump_stack_lvl+0xd0/0x124 [ 202.196491][ T7247] dump_stack+0x1c/0x28 [ 202.197190][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 202.197617][ T7247] should_fail_ex+0x3f8/0x5c4 [ 202.197634][ T7247] should_fail+0x14/0x24 [ 202.197643][ T7247] should_fail_usercopy+0x20/0x30 [ 202.197654][ T7247] bpf_check+0xe190/0xf6a4 [ 202.204607][ T7247] bpf_prog_load+0xfa0/0x16c8 [ 202.205878][ T7247] __sys_bpf+0x2ac/0x5dc [ 202.207016][ T7247] __arm64_sys_bpf+0x80/0x98 [ 202.208271][ T7247] invoke_syscall+0x98/0x2b8 [ 202.209508][ T7247] el0_svc_common+0x130/0x23c 00:03:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 202.210753][ T7247] do_el0_svc+0x48/0x58 [ 202.211881][ T7247] el0_svc+0x58/0x16c [ 202.212984][ T7247] el0t_64_sync_handler+0x84/0xfc [ 202.214353][ T7247] el0t_64_sync+0x190/0x194 00:03:22 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) 00:03:22 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x80086601, 0x0) 00:03:22 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @local}, &(0x7f00000000c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000454e3815bb0f2398b9cb73d229980000ba242f"], 0x10) 00:03:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 24) [ 202.273611][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 202.276083][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 201 00:03:22 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) [ 202.295369][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 202.297662][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 202.301311][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:22 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x80108906, 0x0) [ 202.304860][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 202.334186][ T7269] FAULT_INJECTION: forcing a failure. [ 202.334186][ T7269] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:03:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 202.338838][ T7269] CPU: 0 PID: 7269 Comm: syz-executor.3 Not tainted 6.6.0-rc4-syzkaller-g19af4a4ed414 #0 [ 202.341517][ T7269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 202.344228][ T7269] Call trace: [ 202.345153][ T7269] dump_backtrace+0x1b8/0x1e4 [ 202.346407][ T7269] show_stack+0x2c/0x44 [ 202.347579][ T7269] dump_stack_lvl+0xd0/0x124 [ 202.348822][ T7269] dump_stack+0x1c/0x28 [ 202.349916][ T7269] should_fail_ex+0x3f8/0x5c4 [ 202.351283][ T7269] should_fail+0x14/0x24 [ 202.352455][ T7269] should_fail_usercopy+0x20/0x30 [ 202.353841][ T7269] simple_read_from_buffer+0xd4/0x248 [ 202.355274][ T7269] proc_fail_nth_read+0x134/0x1a0 [ 202.356628][ T7269] vfs_read+0x284/0x8d4 [ 202.357734][ T7269] ksys_read+0x15c/0x26c [ 202.358899][ T7269] __arm64_sys_read+0x7c/0x90 [ 202.360182][ T7269] invoke_syscall+0x98/0x2b8 [ 202.361428][ T7269] el0_svc_common+0x130/0x23c [ 202.362677][ T7269] do_el0_svc+0x48/0x58 [ 202.363771][ T7269] el0_svc+0x58/0x16c [ 202.364887][ T7269] el0t_64_sync_handler+0x84/0xfc [ 202.366279][ T7269] el0t_64_sync+0x190/0x194 [ 202.384866][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 202.387080][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 201 00:03:22 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x80108907, 0x0) 00:03:22 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @local}, &(0x7f00000000c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000454e3815bb0f2398b9cb73d229980000ba242f"], 0x10) 00:03:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 202.432002][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 202.436102][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 202.441817][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 202.446638][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000008c0)=""/145}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x101, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/150, 0x96}], 0x1, 0x81, 0x0) (async) r5 = openat$incfs(r2, &(0x7f0000000880)='.pending_reads\x00', 0x80, 0x2) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000040), &(0x7f0000000140)=""/72}, 0x20) (async) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000040), &(0x7f0000000140)=""/72}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)='syzkaller\x00', 0x1ff, 0x1e, &(0x7f0000000380)=""/30, 0x41000, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000003c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x7, 0x14dd, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[r5, r6, r7, r2, r8, r2, r2, r1]}, 0x90) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010e00"/20, @ANYRES32=0x0, @ANYBLOB="00005c0f00002000"], 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x24980000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x631}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x24004802) (async) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0xa, 0x0, 0x0) (async) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) 00:03:23 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) 00:03:23 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @local}, &(0x7f00000000c0)=0xc) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000454e3815bb0f2398b9cb73d229980000ba242f"], 0x10) 00:03:23 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x801c581f, 0x0) 00:03:23 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:23 executing program 3: bpf$PROG_LOAD(0x2, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 203.115119][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 203.115872][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 203.117222][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 203.131360][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 203.133964][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:23 executing program 3: bpf$PROG_LOAD(0x3, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 203.139221][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:23 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x0, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) 00:03:23 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0xc0045878, 0x0) 00:03:23 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000008c0)=""/145}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x101, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/150, 0x96}], 0x1, 0x81, 0x0) r5 = openat$incfs(r2, &(0x7f0000000880)='.pending_reads\x00', 0x80, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000040), &(0x7f0000000140)=""/72}, 0x20) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000040), &(0x7f0000000140)=""/72}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)='syzkaller\x00', 0x1ff, 0x1e, &(0x7f0000000380)=""/30, 0x41000, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000003c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x7, 0x14dd, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[r5, r6, r7, r2, r8, r2, r2, r1]}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010e00"/20, @ANYRES32=0x0, @ANYBLOB="00005c0f00002000"], 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x24980000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x631}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x24004802) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0xa, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) [ 203.218433][ T28] audit: type=1326 audit(203.190:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7294 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee5c5e8 code=0x0 [ 203.234474][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 203.236733][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 201 00:03:23 executing program 3: bpf$PROG_LOAD(0x4, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 203.251048][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 203.253198][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 203.255283][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 203.257325][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:23 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x0, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) 00:03:23 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0xc0045878, 0x0) 00:03:23 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000008c0)=""/145}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x101, 0x4) (async) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (rerun: 32) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/150, 0x96}], 0x1, 0x81, 0x0) (async) r5 = openat$incfs(r2, &(0x7f0000000880)='.pending_reads\x00', 0x80, 0x2) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000040), &(0x7f0000000140)=""/72}, 0x20) (async) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000040), &(0x7f0000000140)=""/72}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)='syzkaller\x00', 0x1ff, 0x1e, &(0x7f0000000380)=""/30, 0x41000, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000003c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x7, 0x14dd, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[r5, r6, r7, r2, r8, r2, r2, r1]}, 0x90) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010e00"/20, @ANYRES32=0x0, @ANYBLOB="00005c0f00002000"], 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x24980000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x631}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x24004802) (async) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0xa, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) 00:03:23 executing program 3: bpf$PROG_LOAD(0x6, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 204.034508][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 204.038365][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 204.043965][ T6050] bt_err_ratelimited: 90 callbacks suppressed [ 204.043978][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 204.045706][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 204.050062][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 204.052386][ T5586] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 204.052511][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0xc0189436, 0x0) 00:03:24 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x0, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) [ 204.071448][ T28] audit: type=1326 audit(204.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7319 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee5c5e8 code=0x0 [ 204.071914][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 204.077029][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:24 executing program 3: bpf$PROG_LOAD(0x7, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:24 executing program 3: bpf$PROG_LOAD(0x8, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 204.128243][ T28] audit: type=1326 audit(204.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7319 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee5c5e8 code=0x0 [ 204.138802][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 204.140804][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 00:03:24 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x90000) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1, 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000cff286000000000095100000000000000000000000000015889097"], &(0x7f0000000100)='GPL\x00'}, 0x90) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 00:03:24 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) 00:03:24 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x80108906, 0x0) 00:03:24 executing program 3: bpf$PROG_LOAD(0x9, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 204.142849][ T5586] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 204.207164][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0xc020660b, 0x0) [ 204.211383][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 204.211433][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 204.216894][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 204.217337][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:24 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) [ 204.252256][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 204.254670][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 00:03:24 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x90000) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1, 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000cff286000000000095100000000000000000000000000015889097"], &(0x7f0000000100)='GPL\x00'}, 0x90) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x90000) (async) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1, 0x3}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000cff286000000000095100000000000000000000000000015889097"], &(0x7f0000000100)='GPL\x00'}, 0x90) (async) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) (async) 00:03:24 executing program 3: bpf$PROG_LOAD(0xa, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x40}}, 0x0) [ 204.256990][ T5586] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 204.326899][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 204.334268][ T6050] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 204.337527][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 204.342755][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 204.343065][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:24 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x90000) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1, 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000cff286000000000095100000000000000000000000000015889097"], &(0x7f0000000100)='GPL\x00'}, 0x90) (async) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 00:03:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x401) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) [ 204.357401][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 204.357967][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:24 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) 00:03:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 204.394324][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:24 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:24 executing program 3: bpf$PROG_LOAD(0xb, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 204.429316][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x40}}, 0x0) [ 204.437434][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 204.441066][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:24 executing program 3: bpf$PROG_LOAD(0xc, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 204.456645][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:24 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(0x0, 0x0) 00:03:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x0, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x401) listen(r0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000280)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}, @sndrcv={0x30}, @prinfo={0x18, 0x84, 0x5, {0x10}}], 0x68}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00', {0x1}, 0xf342}) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="7f0000000000000008d9700d1e9921837108"], &(0x7f0000000040)=0x16) [ 204.532190][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x40}}, 0x0) 00:03:24 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(0x0, 0x0) [ 204.557027][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 204.559768][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 204.562483][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:24 executing program 3: bpf$PROG_LOAD(0xd, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 204.579174][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x0, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 204.605174][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:24 executing program 3: bpf$PROG_LOAD(0xe, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x401) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) socket$inet6(0xa, 0x6, 0x401) (async) listen(r0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) (async) [ 204.626203][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 204.629150][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 204.642875][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 204.645155][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:24 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/dev/loop#\x00'}]}, 0x17) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/247, 0xf7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x67, 0xff, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @local, {[@timestamp_addr={0x44, 0x4c, 0x79, 0x1, 0x0, [{@multicast1, 0x9}, {@private=0xa010102, 0x7}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x5c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3ff}, {@local, 0x3}, {@empty, 0x3}, {@empty, 0x8}]}]}}}}}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x810) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x1180, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=0x64010100, 0x1, 0xb}}) sendfile(r8, r11, 0x0, 0x9) sendfile(r9, r6, 0x0, 0x10000a007) 00:03:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000280)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}, @sndrcv={0x30}, @prinfo={0x18, 0x84, 0x5, {0x10}}], 0x68}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00', {0x1}, 0xf342}) (async) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="7f0000000000000008d9700d1e9921837108"], &(0x7f0000000040)=0x16) 00:03:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x0, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:24 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(0x0, 0x0) [ 204.696860][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 204.722596][ T7398] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 00:03:24 executing program 3: bpf$PROG_LOAD(0xf, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 204.761743][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 204.764070][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 204.766246][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 204.773308][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:24 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x100001) r2 = openat(r1, &(0x7f0000004280)='./file0\x00', 0x400400, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @remote}, 0xc) 00:03:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000280)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}, @sndrcv={0x30}, @prinfo={0x18, 0x84, 0x5, {0x10}}], 0x68}, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00', {0x1}, 0xf342}) (async) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="7f0000000000000008d9700d1e9921837108"], &(0x7f0000000040)=0x16) 00:03:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x0, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 204.826382][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 204.829159][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 204.831935][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 204.835691][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x0, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:24 executing program 1: socket$inet6(0xa, 0x6, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x100001) openat(r1, &(0x7f0000004280)='./file0\x00', 0x400400, 0x0) (async) r2 = openat(r1, &(0x7f0000004280)='./file0\x00', 0x400400, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @remote}, 0xc) 00:03:24 executing program 3: bpf$PROG_LOAD(0x10, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 204.869445][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 204.924750][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 204.926910][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 204.929364][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 204.937933][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:24 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) 00:03:24 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/dev/loop#\x00'}]}, 0x17) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/247, 0xf7) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x67, 0xff, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @local, {[@timestamp_addr={0x44, 0x4c, 0x79, 0x1, 0x0, [{@multicast1, 0x9}, {@private=0xa010102, 0x7}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x5c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3ff}, {@local, 0x3}, {@empty, 0x3}, {@empty, 0x8}]}]}}}}}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x810) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x1180, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=0x64010100, 0x1, 0xb}}) (async) sendfile(r8, r11, 0x0, 0x9) sendfile(r9, r6, 0x0, 0x10000a007) 00:03:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x0, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:24 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x100001) r2 = openat(r1, &(0x7f0000004280)='./file0\x00', 0x400400, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @remote}, 0xc) 00:03:24 executing program 3: bpf$PROG_LOAD(0x11, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x100001) r2 = openat(r1, &(0x7f0000004280)='./file0\x00', 0x400400, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @remote}, 0xc) socket$inet6(0xa, 0x6, 0x0) (async) listen(r0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x100001) (async) openat(r1, &(0x7f0000004280)='./file0\x00', 0x400400, 0x0) (async) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) (async) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @remote}, 0xc) (async) [ 205.053858][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.056009][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 205.058071][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.060335][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 205.063613][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 205.068393][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:25 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/dev/loop#\x00'}]}, 0x17) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/247, 0xf7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x67, 0xff, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @local, {[@timestamp_addr={0x44, 0x4c, 0x79, 0x1, 0x0, [{@multicast1, 0x9}, {@private=0xa010102, 0x7}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x5c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3ff}, {@local, 0x3}, {@empty, 0x3}, {@empty, 0x8}]}]}}}}}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x810) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x1180, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=0x64010100, 0x1, 0xb}}) sendfile(r8, r11, 0x0, 0x9) sendfile(r9, r6, 0x0, 0x10000a007) 00:03:25 executing program 3: bpf$PROG_LOAD(0x12, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:25 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) [ 205.112615][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x0, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:25 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet6(r0, &(0x7f0000001840)={&(0x7f0000001480)={0xa, 0x4e21, 0x9, @local, 0x1c00000}, 0x1c, &(0x7f0000001580)=[{&(0x7f00000014c0)="c085860e4bf52529aa8aab23912cfeb3a08b9557a4fba578940ec0b9a999c8f11325b32fbb7571f68714966dbb3d9c059f4a8db01f3b1481e7b59b2f14c9d9e113b999bd0f65f65607c2627bded5a59c704f82d6e1e48b834a6e707ba8d3391e16809e4c9598f83ccc2b8769ab5bb0e07856571132a6e7f4efcb0eba3a231fe26824856b18b83299025a22b05155846223c6f766", 0x94}], 0x1, &(0x7f00000015c0)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x6c, 0x4, 0x0, 0x17, 0x0, [@private0, @mcast1]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0xc, 0x4, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0xc}, @local]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x21, 0x2, 0x1, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x2f, 0x8, '\x00', [@generic={0x7f, 0x3d, "58a68a9c813f24a37d37d5b01662909aab004937ee1af2bb3ae75b918e45c5b0bcd7b907f2b974fe44aaab6ee663fc7f0cf8490985dcc5ab78871238c5"}, @jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x23, 0x4, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x400000}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x0, 0x1b, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @pad1, @ra={0x5, 0x2, 0x4}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @generic={0x0, 0x4c, "249c46149dc6b8dfcbe8e5d93e0854755141fefd487912d0a4702937934198728de79be15a9004c8296fda8077e58367d8a09ca095ad0ba7c9ec5785f8ef338f30262a7e3a27a722a4505c43"}, @generic={0xb6, 0x6a, "0c39bcf03704f50826eda55bc6b70dc54bdf16ac7cf187a9a8dbd9194c4907cc8a824579def22868340e0e0f9b6b472549b6252f9cbc18608b64605501c7b1e3e98b73d069aa1d5eb8194678c7c6cdf8760ada199f6537799ffd71a78341bf9e009248511e6b47a5de9b"}]}}}], 0x250}, 0x40) listen(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r1, &(0x7f0000001400)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="1338c6052c4c8e8e96c715b810618f6387a0f6ce5db4a1193a44060ab92a7dc934e087c4ee510f9c8fc581e98eddc24f06d8edd1ebac4425e0d58ea181b38f0361bc51cf71862aedf0cab5a5fa9c026d7e4dcbf9656c6e0ea0fb609edf0250fcf2881961e8e9be98ce636d9c395c4e1278d4bc32ebffc803054629d400f6744c514f6bb7", 0x84}, {&(0x7f0000000100)="30fd2f45cd53a6465f4a12ea00b0058db1f6a2420d773c4e81e46704761f4ec9aeedbdaa5c3ecf14f5dafecd2d002b79585547dc3aa31c019c312edb6f9299c25a08777a", 0x44}], 0x2}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000200)="07b0b30af1f507761bb48ae198d837f5b503a4d7b712d02514870353f9896c3cd4a9cecb4eef47ed85359ba0391763a18b6f7d75b0249d489f16fd04ac992ee094ba8f3d2fe94c0042b7ed6d0022993d2197884d7c8f71a983642287e15348e99b5993584599671f708fb6e53612f51c63f8f601ed2f80e9a3c42aca4ae488994e2815b5b73455eb83edfb2c49d6a6a9ee23ad1e4c590025ee2f566c", 0x9c}, {&(0x7f00000002c0)="ae1a408465983b2a49ba4ff119056e3a623cde01decf92ca5df74755539d386eba4c413454562fa8b6af622b5f071ad2135703ee78bba2a56eb4e69677cd472216665e41a7b40460fcd646252ec50de21ba2d504efaf329e5b75a7ba68d0e80fe4bdf9662f38472fe0b816e0c68d806e6a556f41323dadd84d28c5fd2b853b9e9e9c058fbd9d66ca0fd39b425b0bfca75febd1e657202a525e177f9d41df41eaa41d6870dd19", 0xa6}, {&(0x7f0000000380)="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", 0x1000}], 0x3, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x20}}], 0x2, 0x40880) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:25 executing program 3: bpf$PROG_LOAD(0x13, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:25 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4d, 0xc8, 0xb2}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 205.189427][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.191626][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 205.193645][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.195833][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 205.212868][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x0, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:25 executing program 3: bpf$PROG_LOAD(0x14, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:25 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/dev/loop#\x00'}]}, 0x17) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/247, 0xf7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x67, 0xff, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @local, {[@timestamp_addr={0x44, 0x4c, 0x79, 0x1, 0x0, [{@multicast1, 0x9}, {@private=0xa010102, 0x7}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x5c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3ff}, {@local, 0x3}, {@empty, 0x3}, {@empty, 0x8}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x67, 0xff, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @local, {[@timestamp_addr={0x44, 0x4c, 0x79, 0x1, 0x0, [{@multicast1, 0x9}, {@private=0xa010102, 0x7}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x5c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3ff}, {@local, 0x3}, {@empty, 0x3}, {@empty, 0x8}]}]}}}}}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x810) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x810) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$dupfd(r5, 0x0, r6) (async) r7 = fcntl$dupfd(r5, 0x0, r6) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x1180, 0x0) (async) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x1180, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=0x64010100, 0x1, 0xb}}) sendfile(r8, r11, 0x0, 0x9) (async) sendfile(r8, r11, 0x0, 0x9) sendfile(r9, r6, 0x0, 0x10000a007) 00:03:25 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet6(r0, &(0x7f0000001840)={&(0x7f0000001480)={0xa, 0x4e21, 0x9, @local, 0x1c00000}, 0x1c, &(0x7f0000001580)=[{&(0x7f00000014c0)="c085860e4bf52529aa8aab23912cfeb3a08b9557a4fba578940ec0b9a999c8f11325b32fbb7571f68714966dbb3d9c059f4a8db01f3b1481e7b59b2f14c9d9e113b999bd0f65f65607c2627bded5a59c704f82d6e1e48b834a6e707ba8d3391e16809e4c9598f83ccc2b8769ab5bb0e07856571132a6e7f4efcb0eba3a231fe26824856b18b83299025a22b05155846223c6f766", 0x94}], 0x1, &(0x7f00000015c0)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x6c, 0x4, 0x0, 0x17, 0x0, [@private0, @mcast1]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0xc, 0x4, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0xc}, @local]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x21, 0x2, 0x1, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x2f, 0x8, '\x00', [@generic={0x7f, 0x3d, "58a68a9c813f24a37d37d5b01662909aab004937ee1af2bb3ae75b918e45c5b0bcd7b907f2b974fe44aaab6ee663fc7f0cf8490985dcc5ab78871238c5"}, @jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x23, 0x4, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x400000}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x0, 0x1b, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @pad1, @ra={0x5, 0x2, 0x4}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @generic={0x0, 0x4c, "249c46149dc6b8dfcbe8e5d93e0854755141fefd487912d0a4702937934198728de79be15a9004c8296fda8077e58367d8a09ca095ad0ba7c9ec5785f8ef338f30262a7e3a27a722a4505c43"}, @generic={0xb6, 0x6a, "0c39bcf03704f50826eda55bc6b70dc54bdf16ac7cf187a9a8dbd9194c4907cc8a824579def22868340e0e0f9b6b472549b6252f9cbc18608b64605501c7b1e3e98b73d069aa1d5eb8194678c7c6cdf8760ada199f6537799ffd71a78341bf9e009248511e6b47a5de9b"}]}}}], 0x250}, 0x40) (async) listen(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r1, &(0x7f0000001400)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="1338c6052c4c8e8e96c715b810618f6387a0f6ce5db4a1193a44060ab92a7dc934e087c4ee510f9c8fc581e98eddc24f06d8edd1ebac4425e0d58ea181b38f0361bc51cf71862aedf0cab5a5fa9c026d7e4dcbf9656c6e0ea0fb609edf0250fcf2881961e8e9be98ce636d9c395c4e1278d4bc32ebffc803054629d400f6744c514f6bb7", 0x84}, {&(0x7f0000000100)="30fd2f45cd53a6465f4a12ea00b0058db1f6a2420d773c4e81e46704761f4ec9aeedbdaa5c3ecf14f5dafecd2d002b79585547dc3aa31c019c312edb6f9299c25a08777a", 0x44}], 0x2}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000200)="07b0b30af1f507761bb48ae198d837f5b503a4d7b712d02514870353f9896c3cd4a9cecb4eef47ed85359ba0391763a18b6f7d75b0249d489f16fd04ac992ee094ba8f3d2fe94c0042b7ed6d0022993d2197884d7c8f71a983642287e15348e99b5993584599671f708fb6e53612f51c63f8f601ed2f80e9a3c42aca4ae488994e2815b5b73455eb83edfb2c49d6a6a9ee23ad1e4c590025ee2f566c", 0x9c}, {&(0x7f00000002c0)="ae1a408465983b2a49ba4ff119056e3a623cde01decf92ca5df74755539d386eba4c413454562fa8b6af622b5f071ad2135703ee78bba2a56eb4e69677cd472216665e41a7b40460fcd646252ec50de21ba2d504efaf329e5b75a7ba68d0e80fe4bdf9662f38472fe0b816e0c68d806e6a556f41323dadd84d28c5fd2b853b9e9e9c058fbd9d66ca0fd39b425b0bfca75febd1e657202a525e177f9d41df41eaa41d6870dd19", 0xa6}, {&(0x7f0000000380)="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", 0x1000}], 0x3, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x20}}], 0x2, 0x40880) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:25 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4d, 0xc8, 0xb2}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (rerun: 64) [ 205.301418][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 205.318513][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.328251][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 205.331375][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.340146][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:25 executing program 2: keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfe) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) 00:03:25 executing program 3: bpf$PROG_LOAD(0x15, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:25 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4d, 0xc8, 0xb2}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 00:03:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x0, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:25 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet6(r0, &(0x7f0000001840)={&(0x7f0000001480)={0xa, 0x4e21, 0x9, @local, 0x1c00000}, 0x1c, &(0x7f0000001580)=[{&(0x7f00000014c0)="c085860e4bf52529aa8aab23912cfeb3a08b9557a4fba578940ec0b9a999c8f11325b32fbb7571f68714966dbb3d9c059f4a8db01f3b1481e7b59b2f14c9d9e113b999bd0f65f65607c2627bded5a59c704f82d6e1e48b834a6e707ba8d3391e16809e4c9598f83ccc2b8769ab5bb0e07856571132a6e7f4efcb0eba3a231fe26824856b18b83299025a22b05155846223c6f766", 0x94}], 0x1, &(0x7f00000015c0)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x6c, 0x4, 0x0, 0x17, 0x0, [@private0, @mcast1]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0xc, 0x4, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0xc}, @local]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x21, 0x2, 0x1, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x2f, 0x8, '\x00', [@generic={0x7f, 0x3d, "58a68a9c813f24a37d37d5b01662909aab004937ee1af2bb3ae75b918e45c5b0bcd7b907f2b974fe44aaab6ee663fc7f0cf8490985dcc5ab78871238c5"}, @jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x23, 0x4, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x400000}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x0, 0x1b, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @pad1, @ra={0x5, 0x2, 0x4}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @generic={0x0, 0x4c, "249c46149dc6b8dfcbe8e5d93e0854755141fefd487912d0a4702937934198728de79be15a9004c8296fda8077e58367d8a09ca095ad0ba7c9ec5785f8ef338f30262a7e3a27a722a4505c43"}, @generic={0xb6, 0x6a, "0c39bcf03704f50826eda55bc6b70dc54bdf16ac7cf187a9a8dbd9194c4907cc8a824579def22868340e0e0f9b6b472549b6252f9cbc18608b64605501c7b1e3e98b73d069aa1d5eb8194678c7c6cdf8760ada199f6537799ffd71a78341bf9e009248511e6b47a5de9b"}]}}}], 0x250}, 0x40) (async) listen(r0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r1, &(0x7f0000001400)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="1338c6052c4c8e8e96c715b810618f6387a0f6ce5db4a1193a44060ab92a7dc934e087c4ee510f9c8fc581e98eddc24f06d8edd1ebac4425e0d58ea181b38f0361bc51cf71862aedf0cab5a5fa9c026d7e4dcbf9656c6e0ea0fb609edf0250fcf2881961e8e9be98ce636d9c395c4e1278d4bc32ebffc803054629d400f6744c514f6bb7", 0x84}, {&(0x7f0000000100)="30fd2f45cd53a6465f4a12ea00b0058db1f6a2420d773c4e81e46704761f4ec9aeedbdaa5c3ecf14f5dafecd2d002b79585547dc3aa31c019c312edb6f9299c25a08777a", 0x44}], 0x2}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000200)="07b0b30af1f507761bb48ae198d837f5b503a4d7b712d02514870353f9896c3cd4a9cecb4eef47ed85359ba0391763a18b6f7d75b0249d489f16fd04ac992ee094ba8f3d2fe94c0042b7ed6d0022993d2197884d7c8f71a983642287e15348e99b5993584599671f708fb6e53612f51c63f8f601ed2f80e9a3c42aca4ae488994e2815b5b73455eb83edfb2c49d6a6a9ee23ad1e4c590025ee2f566c", 0x9c}, {&(0x7f00000002c0)="ae1a408465983b2a49ba4ff119056e3a623cde01decf92ca5df74755539d386eba4c413454562fa8b6af622b5f071ad2135703ee78bba2a56eb4e69677cd472216665e41a7b40460fcd646252ec50de21ba2d504efaf329e5b75a7ba68d0e80fe4bdf9662f38472fe0b816e0c68d806e6a556f41323dadd84d28c5fd2b853b9e9e9c058fbd9d66ca0fd39b425b0bfca75febd1e657202a525e177f9d41df41eaa41d6870dd19", 0xa6}, {&(0x7f0000000380)="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", 0x1000}], 0x3, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x20}}], 0x2, 0x40880) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) [ 205.514649][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:25 executing program 2: keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfe) (async) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) [ 205.528884][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.531072][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:25 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="2be0213d4c14f29ec4daf1b84ea248fa8a4b49e4c3ec4d746918058b62b1abc92108f926303e", 0x26}, {&(0x7f0000000140)="1190881fe5c7830aeb448bb4ebc84aafac13c1e64c1533f90d7a7e236bba0175c0f65f38d4d37201f6d5e6da21df288b5c3198a2328a43ac467e176afc0d76962e78e6f1cb385216d4b20fd5f2119b3fa1cafe2d0efd3e3d121c2f68d17f8717a72706ebed3c3a8b1a1a2ea98ef22fa51384fbc121eb", 0x76}, {&(0x7f00000001c0)="84c7eff2e6c6f1557980b9897952ff154771ae190762afd1e36934876d0aa83956811d601a67027152285085d98a540b95c795dca8941877d5706cf99551e4", 0x3f}, {&(0x7f0000000200)="bd9ba73a7946a8ab71a763243b128d96e17d0dcc0c715c1bb9bedd0748fea99befa7fd18a933c45be0e2aa10e4d0a6726871bc790b4a47fdff318d7032c9fd6634a60c25965c9995884e75f9eff078366af7ccb42635", 0x56}, {&(0x7f0000000280)="9984afdadfc8866158fde5b731c396d28fb305f735f2684c0661202d14893f1da4e83d51bfefceb7a349ba6974563b253dc1b27d8461ef33f97301131cbb06798c8a43cbd68684fa3531bf283d4c1129d944966c8057abe8f5f811c79180d1e8e90c", 0x62}, {&(0x7f0000000300)="3364a57d8fe9fce1ccff4c353f18249b8ab4e081d17bb324f5c21ee4a624eff12923dc2011a555384de6ad5892", 0x2d}], 0x6, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}}, {{&(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000440)="1233a5262eb14cd5f56420a015b5403b0aec32be20419dcc512a0bc2d5fb279bff0909cf29682b74b0aa1882d637b9c57c7a66eed7ab139151620ddd0d85fb64dd4ac84605cf2d70fa5dd1aa13a952f9c69534c8e7ec23517a3d09768b1ffea4fc7117fbc63a7b9b5456df139476c48b91e1b5dfe518733f7d3fa525fb1fccd8e1669f72899ba4b2bb0418b3d26f00b9ecd106e2bb77ab912d6ba4ea13a3a5dbec410f952e10623b6fc27fe16b3bff335d3f0c3da4e6ff7a16a3f76e", 0xbc}, {&(0x7f0000000500)="b9a6bb5c0e0332140e8584a61a452e7a6f31d679eb5ea2b2f5b0edf767a92c0ae68d5636bdf9a201ff15eebc51461f367bf4ab97d0cc6f33b4ba3c4e0bf830f6e5ce4111bc40ceaf701e4b4a698b47d983defe52c165b2793cc7dc2a12f68f35fac5833e31d368b34be6598cba93b8655b236d14b2097fe949d4ca121bf32860094b5504bafa6c73a86df9f62654e3f5675e729bacd89025eb0ba1984bf0bc54c4a12aba70da748205cf880915e7e83bb763da785ffa6fd66a43516f884758d1a46d3bf29aaf8c8bdbb039b9b16f421ccb096ed7d13c8602d859c82aae0f6b05880762caf6d333ad1589fa1fca20e90807", 0xf1}, {&(0x7f0000000600)="ea74f796c4946da836132fd1d1c311440473974f4b8177c325825bfc0f5e8ef9aecdf200ccb2ce3e0f8f9c699facf388f76fc092e6ee23ef0a8465328472189a02937f26fb3447ade48e93305f5438420350241a1caab34d169d7801decfdb4e6eea743254eeae34464a584726b91d16775df06759bd9957de36eb5254df6ca82d23fd8b906cf7fee1f2e19f13b4b62767b65568a610c91b1b0bec0964e17c7bb83bc1fcccc23171ba05169f079a0399ca5e24651b502c42ad0030f85eb0d3e9dab27740d430db4bdf100f833ac06da9a1c826e387155cd345c0011e4e1ed42ac946c21ddc3dbe16c6366aa7fa15d1b4", 0xf0}, {&(0x7f0000000700)="f7fd362b723e586265cc1e3c2ab1e2f78528529270abea1e8d05788c6cb625ef93ea1a73803cacd7ba63b378f02a1ce6d6cc8b269dbe444e33dd76fd01824972a5bcd0ca81117f8f555670b3d6436e1a52c051930e03ae2a401ec582aec912f6bb96beb42818208ec68e", 0x6a}, {&(0x7f0000000780)="e7ea4f9e31bfa1211fd48f31a79a2be952a0fe82b7d894c87a75c5c779fc3308751a10e51747b500010a41d1dfaa1529a1cf25fca17e28484501295d93be4b86f3d7ea0a22e35fd5134c01d2d8a5f238bb87eb311b180c9afd02de9a7d05edc5fe7dd8602df77a3e383d362bbde2ee05bd4266c3262d", 0x76}], 0x5, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffc01}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0xc5, 0x1, 0x4, [{@broadcast, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x200}, {@remote, 0x5}, {@multicast2, 0x6705}, {@empty, 0x4}, {@rand_addr=0x64010101, 0x6}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010100, 0x5}, {@broadcast, 0xf6e}]}, @timestamp={0x44, 0x14, 0x6d, 0x0, 0x7, [0x7fff, 0x6, 0x8, 0x1]}, @lsrr={0x83, 0x1b, 0x6, [@empty, @local, @private=0xa010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1e}, @remote]}, @generic={0x88, 0x5, "44f845"}, @generic={0x16, 0x2}, @end, @cipso={0x86, 0x24, 0x3, [{0x1, 0x7, "4d53e55549"}, {0x2, 0x12, "e4311ec64e5975238f8a0a298a1c29ba"}, {0x7, 0x5, "c13689"}]}, @ssrr={0x89, 0x13, 0x1e, [@loopback, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @local]}, @ssrr={0x89, 0xf, 0x1f, [@broadcast, @rand_addr=0x64010101, @multicast1]}, @ssrr={0x89, 0x2b, 0x40, [@broadcast, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @local, @empty, @multicast1, @rand_addr=0x64010102, @local, @multicast1]}]}}}], 0x128}}], 0x2, 0x4000) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f0000000a40)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb}, "0d78a85b2f0e002a70a800"}, 0xf) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x5, 0xc9, 0x5, 0x6}}}, 0x10) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 205.545426][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.547786][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:25 executing program 3: bpf$PROG_LOAD(0x16, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x0, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 205.591339][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 205.611534][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.613690][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 205.626642][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.629389][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:25 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="2be0213d4c14f29ec4daf1b84ea248fa8a4b49e4c3ec4d746918058b62b1abc92108f926303e", 0x26}, {&(0x7f0000000140)="1190881fe5c7830aeb448bb4ebc84aafac13c1e64c1533f90d7a7e236bba0175c0f65f38d4d37201f6d5e6da21df288b5c3198a2328a43ac467e176afc0d76962e78e6f1cb385216d4b20fd5f2119b3fa1cafe2d0efd3e3d121c2f68d17f8717a72706ebed3c3a8b1a1a2ea98ef22fa51384fbc121eb", 0x76}, {&(0x7f00000001c0)="84c7eff2e6c6f1557980b9897952ff154771ae190762afd1e36934876d0aa83956811d601a67027152285085d98a540b95c795dca8941877d5706cf99551e4", 0x3f}, {&(0x7f0000000200)="bd9ba73a7946a8ab71a763243b128d96e17d0dcc0c715c1bb9bedd0748fea99befa7fd18a933c45be0e2aa10e4d0a6726871bc790b4a47fdff318d7032c9fd6634a60c25965c9995884e75f9eff078366af7ccb42635", 0x56}, {&(0x7f0000000280)="9984afdadfc8866158fde5b731c396d28fb305f735f2684c0661202d14893f1da4e83d51bfefceb7a349ba6974563b253dc1b27d8461ef33f97301131cbb06798c8a43cbd68684fa3531bf283d4c1129d944966c8057abe8f5f811c79180d1e8e90c", 0x62}, {&(0x7f0000000300)="3364a57d8fe9fce1ccff4c353f18249b8ab4e081d17bb324f5c21ee4a624eff12923dc2011a555384de6ad5892", 0x2d}], 0x6, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}}, {{&(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000440)="1233a5262eb14cd5f56420a015b5403b0aec32be20419dcc512a0bc2d5fb279bff0909cf29682b74b0aa1882d637b9c57c7a66eed7ab139151620ddd0d85fb64dd4ac84605cf2d70fa5dd1aa13a952f9c69534c8e7ec23517a3d09768b1ffea4fc7117fbc63a7b9b5456df139476c48b91e1b5dfe518733f7d3fa525fb1fccd8e1669f72899ba4b2bb0418b3d26f00b9ecd106e2bb77ab912d6ba4ea13a3a5dbec410f952e10623b6fc27fe16b3bff335d3f0c3da4e6ff7a16a3f76e", 0xbc}, {&(0x7f0000000500)="b9a6bb5c0e0332140e8584a61a452e7a6f31d679eb5ea2b2f5b0edf767a92c0ae68d5636bdf9a201ff15eebc51461f367bf4ab97d0cc6f33b4ba3c4e0bf830f6e5ce4111bc40ceaf701e4b4a698b47d983defe52c165b2793cc7dc2a12f68f35fac5833e31d368b34be6598cba93b8655b236d14b2097fe949d4ca121bf32860094b5504bafa6c73a86df9f62654e3f5675e729bacd89025eb0ba1984bf0bc54c4a12aba70da748205cf880915e7e83bb763da785ffa6fd66a43516f884758d1a46d3bf29aaf8c8bdbb039b9b16f421ccb096ed7d13c8602d859c82aae0f6b05880762caf6d333ad1589fa1fca20e90807", 0xf1}, {&(0x7f0000000600)="ea74f796c4946da836132fd1d1c311440473974f4b8177c325825bfc0f5e8ef9aecdf200ccb2ce3e0f8f9c699facf388f76fc092e6ee23ef0a8465328472189a02937f26fb3447ade48e93305f5438420350241a1caab34d169d7801decfdb4e6eea743254eeae34464a584726b91d16775df06759bd9957de36eb5254df6ca82d23fd8b906cf7fee1f2e19f13b4b62767b65568a610c91b1b0bec0964e17c7bb83bc1fcccc23171ba05169f079a0399ca5e24651b502c42ad0030f85eb0d3e9dab27740d430db4bdf100f833ac06da9a1c826e387155cd345c0011e4e1ed42ac946c21ddc3dbe16c6366aa7fa15d1b4", 0xf0}, {&(0x7f0000000700)="f7fd362b723e586265cc1e3c2ab1e2f78528529270abea1e8d05788c6cb625ef93ea1a73803cacd7ba63b378f02a1ce6d6cc8b269dbe444e33dd76fd01824972a5bcd0ca81117f8f555670b3d6436e1a52c051930e03ae2a401ec582aec912f6bb96beb42818208ec68e", 0x6a}, {&(0x7f0000000780)="e7ea4f9e31bfa1211fd48f31a79a2be952a0fe82b7d894c87a75c5c779fc3308751a10e51747b500010a41d1dfaa1529a1cf25fca17e28484501295d93be4b86f3d7ea0a22e35fd5134c01d2d8a5f238bb87eb311b180c9afd02de9a7d05edc5fe7dd8602df77a3e383d362bbde2ee05bd4266c3262d", 0x76}], 0x5, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffc01}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0xc5, 0x1, 0x4, [{@broadcast, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x200}, {@remote, 0x5}, {@multicast2, 0x6705}, {@empty, 0x4}, {@rand_addr=0x64010101, 0x6}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010100, 0x5}, {@broadcast, 0xf6e}]}, @timestamp={0x44, 0x14, 0x6d, 0x0, 0x7, [0x7fff, 0x6, 0x8, 0x1]}, @lsrr={0x83, 0x1b, 0x6, [@empty, @local, @private=0xa010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1e}, @remote]}, @generic={0x88, 0x5, "44f845"}, @generic={0x16, 0x2}, @end, @cipso={0x86, 0x24, 0x3, [{0x1, 0x7, "4d53e55549"}, {0x2, 0x12, "e4311ec64e5975238f8a0a298a1c29ba"}, {0x7, 0x5, "c13689"}]}, @ssrr={0x89, 0x13, 0x1e, [@loopback, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @local]}, @ssrr={0x89, 0xf, 0x1f, [@broadcast, @rand_addr=0x64010101, @multicast1]}, @ssrr={0x89, 0x2b, 0x40, [@broadcast, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @local, @empty, @multicast1, @rand_addr=0x64010102, @local, @multicast1]}]}}}], 0x128}}], 0x2, 0x4000) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f0000000a40)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb}, "0d78a85b2f0e002a70a800"}, 0xf) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x5, 0xc9, 0x5, 0x6}}}, 0x10) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="2be0213d4c14f29ec4daf1b84ea248fa8a4b49e4c3ec4d746918058b62b1abc92108f926303e", 0x26}, {&(0x7f0000000140)="1190881fe5c7830aeb448bb4ebc84aafac13c1e64c1533f90d7a7e236bba0175c0f65f38d4d37201f6d5e6da21df288b5c3198a2328a43ac467e176afc0d76962e78e6f1cb385216d4b20fd5f2119b3fa1cafe2d0efd3e3d121c2f68d17f8717a72706ebed3c3a8b1a1a2ea98ef22fa51384fbc121eb", 0x76}, {&(0x7f00000001c0)="84c7eff2e6c6f1557980b9897952ff154771ae190762afd1e36934876d0aa83956811d601a67027152285085d98a540b95c795dca8941877d5706cf99551e4", 0x3f}, {&(0x7f0000000200)="bd9ba73a7946a8ab71a763243b128d96e17d0dcc0c715c1bb9bedd0748fea99befa7fd18a933c45be0e2aa10e4d0a6726871bc790b4a47fdff318d7032c9fd6634a60c25965c9995884e75f9eff078366af7ccb42635", 0x56}, {&(0x7f0000000280)="9984afdadfc8866158fde5b731c396d28fb305f735f2684c0661202d14893f1da4e83d51bfefceb7a349ba6974563b253dc1b27d8461ef33f97301131cbb06798c8a43cbd68684fa3531bf283d4c1129d944966c8057abe8f5f811c79180d1e8e90c", 0x62}, {&(0x7f0000000300)="3364a57d8fe9fce1ccff4c353f18249b8ab4e081d17bb324f5c21ee4a624eff12923dc2011a555384de6ad5892", 0x2d}], 0x6, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}}, {{&(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000440)="1233a5262eb14cd5f56420a015b5403b0aec32be20419dcc512a0bc2d5fb279bff0909cf29682b74b0aa1882d637b9c57c7a66eed7ab139151620ddd0d85fb64dd4ac84605cf2d70fa5dd1aa13a952f9c69534c8e7ec23517a3d09768b1ffea4fc7117fbc63a7b9b5456df139476c48b91e1b5dfe518733f7d3fa525fb1fccd8e1669f72899ba4b2bb0418b3d26f00b9ecd106e2bb77ab912d6ba4ea13a3a5dbec410f952e10623b6fc27fe16b3bff335d3f0c3da4e6ff7a16a3f76e", 0xbc}, {&(0x7f0000000500)="b9a6bb5c0e0332140e8584a61a452e7a6f31d679eb5ea2b2f5b0edf767a92c0ae68d5636bdf9a201ff15eebc51461f367bf4ab97d0cc6f33b4ba3c4e0bf830f6e5ce4111bc40ceaf701e4b4a698b47d983defe52c165b2793cc7dc2a12f68f35fac5833e31d368b34be6598cba93b8655b236d14b2097fe949d4ca121bf32860094b5504bafa6c73a86df9f62654e3f5675e729bacd89025eb0ba1984bf0bc54c4a12aba70da748205cf880915e7e83bb763da785ffa6fd66a43516f884758d1a46d3bf29aaf8c8bdbb039b9b16f421ccb096ed7d13c8602d859c82aae0f6b05880762caf6d333ad1589fa1fca20e90807", 0xf1}, {&(0x7f0000000600)="ea74f796c4946da836132fd1d1c311440473974f4b8177c325825bfc0f5e8ef9aecdf200ccb2ce3e0f8f9c699facf388f76fc092e6ee23ef0a8465328472189a02937f26fb3447ade48e93305f5438420350241a1caab34d169d7801decfdb4e6eea743254eeae34464a584726b91d16775df06759bd9957de36eb5254df6ca82d23fd8b906cf7fee1f2e19f13b4b62767b65568a610c91b1b0bec0964e17c7bb83bc1fcccc23171ba05169f079a0399ca5e24651b502c42ad0030f85eb0d3e9dab27740d430db4bdf100f833ac06da9a1c826e387155cd345c0011e4e1ed42ac946c21ddc3dbe16c6366aa7fa15d1b4", 0xf0}, {&(0x7f0000000700)="f7fd362b723e586265cc1e3c2ab1e2f78528529270abea1e8d05788c6cb625ef93ea1a73803cacd7ba63b378f02a1ce6d6cc8b269dbe444e33dd76fd01824972a5bcd0ca81117f8f555670b3d6436e1a52c051930e03ae2a401ec582aec912f6bb96beb42818208ec68e", 0x6a}, {&(0x7f0000000780)="e7ea4f9e31bfa1211fd48f31a79a2be952a0fe82b7d894c87a75c5c779fc3308751a10e51747b500010a41d1dfaa1529a1cf25fca17e28484501295d93be4b86f3d7ea0a22e35fd5134c01d2d8a5f238bb87eb311b180c9afd02de9a7d05edc5fe7dd8602df77a3e383d362bbde2ee05bd4266c3262d", 0x76}], 0x5, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffc01}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0xc5, 0x1, 0x4, [{@broadcast, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x200}, {@remote, 0x5}, {@multicast2, 0x6705}, {@empty, 0x4}, {@rand_addr=0x64010101, 0x6}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010100, 0x5}, {@broadcast, 0xf6e}]}, @timestamp={0x44, 0x14, 0x6d, 0x0, 0x7, [0x7fff, 0x6, 0x8, 0x1]}, @lsrr={0x83, 0x1b, 0x6, [@empty, @local, @private=0xa010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1e}, @remote]}, @generic={0x88, 0x5, "44f845"}, @generic={0x16, 0x2}, @end, @cipso={0x86, 0x24, 0x3, [{0x1, 0x7, "4d53e55549"}, {0x2, 0x12, "e4311ec64e5975238f8a0a298a1c29ba"}, {0x7, 0x5, "c13689"}]}, @ssrr={0x89, 0x13, 0x1e, [@loopback, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @local]}, @ssrr={0x89, 0xf, 0x1f, [@broadcast, @rand_addr=0x64010101, @multicast1]}, @ssrr={0x89, 0x2b, 0x40, [@broadcast, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @local, @empty, @multicast1, @rand_addr=0x64010102, @local, @multicast1]}]}}}], 0x128}}], 0x2, 0x4000) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(&(0x7f0000000a40)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb}, "0d78a85b2f0e002a70a800"}, 0xf) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x5, 0xc9, 0x5, 0x6}}}, 0x10) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 00:03:25 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xff, @private1, 0x5}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="555b3074a5357c1b443482291a3f4f6f30769ee79c245bad0179fb36c972bf2c03eb324c742fa3bc5a1b1b8d63cd72ce0a5da40dc8769c76ad9da05de6df8b4399baf1c18fb4d50c3495015b585e5983ae3eac7c8b1220c38344e6b7a4c2b8fb4c3774bfd1826788b57a112bfb4a5ed5aa6c396dea123f67778676d4c4af1dec363208a4d43e", 0x86, 0x40800, 0x0, 0x0) listen(r0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) getsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000080)=""/202, &(0x7f0000000180)=0xca) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:25 executing program 2: keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfe) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfe) (async) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) (async) 00:03:25 executing program 3: bpf$PROG_LOAD(0x17, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x0, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) fallocate(r0, 0xc, 0x1, 0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x10000000) write$cgroup_int(r0, &(0x7f0000000380), 0xb14c) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffbfe}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/247, 0xf7) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000180)=""/247, 0xf7) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x50, 0x0, r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', r5, 0x0, 0x1, {0x0, r6}}) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_deladdr={0x48, 0x15, 0x100, 0x70bd2a, 0x25dfdbfe, {0x2, 0x3f, 0x21, 0xfe}, [@IFA_LABEL={0x14, 0x3, 'bridge0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0xbdb4}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x9f7, 0x20, 0xa9f1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) [ 205.679605][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.682270][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 205.684894][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.689973][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:25 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4004) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x50000) write(r2, &(0x7f0000000680)="e589891e0d6dac0f6c0edda84d75456e845813b83bdc092a1129f61369e27f4e4e37ea5e23e476981838fc7e0a219103b963818a3c45e33d3615b2e04006a6a2ce7031cc7f39c02422e25b900b617f0b4ce379909359b2d00f699556cee892cc6ce40698a65a878d3686b44d7c5f5f4f4e7048df7a28cf877fb18be21331314cfd921a89376ec36885920e1bb3696aabe957f7eac00f0e057a24f2bf9d5ab66b15f4d576f1596f50038265487d5c30400e3a025c4e6f2473690e3a4b0ed701414185647137d8", 0xc6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000300), 0x4) mknodat$loop(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x1000, 0x1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x4, @loopback, 0x200}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40043}, 0x8000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc, 0x1000, 0x1}, 0x20) sendto$inet6(r3, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a00)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x48}}, 0x0) recvmsg(r6, &(0x7f0000000640)={&(0x7f0000000480)=@nl=@unspec, 0x80, &(0x7f0000000500)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1, &(0x7f0000000540)=""/193, 0xc1}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0x100f}, {0x0}, {0x0}], 0x3}, 0x400800}], 0x1, 0x122, 0x0) shutdown(r3, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) r8 = accept(r0, &(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f00000002c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000800)={'sit0\x00', r7, 0x80, 0x1, 0x7e8, 0x40, {{0xc, 0x4, 0x0, 0x9, 0x30, 0x66, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x10, 0x5f, 0x0, 0x3, [0xfffffffd, 0x6e4a, 0xffff]}, @timestamp_prespec={0x44, 0xc, 0xf, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0xf}, 0xfffffe00}]}]}}}}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="da6bd1dab1b4749f4ddf072825051f9c14d6c4f9619bcb71f0e40ae4d91e960640d391e98e9e198259a6e32e1433ccdcbbc680b536891a5a57b82f2a9f97e90743e4b2d943097dbfe4d1b191d21df9729e2ac1b03abe0294c3c51b51d8da2aea06886f74af80295a98e7b4ee4de731a2821f209e5c7ab74d4c1080cdd5e73facfc7bbcca0cc472e1e65dd20541ee029f0ad0aed46d7077b0253b5e6840a21259f7b160d0e10eaa49", 0xa8, 0x1, &(0x7f0000000440)={0xa, 0x4e21, 0x3ff, @private1, 0x200}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) 00:03:25 executing program 3: bpf$PROG_LOAD(0x18, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:25 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xff, @private1, 0x5}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="555b3074a5357c1b443482291a3f4f6f30769ee79c245bad0179fb36c972bf2c03eb324c742fa3bc5a1b1b8d63cd72ce0a5da40dc8769c76ad9da05de6df8b4399baf1c18fb4d50c3495015b585e5983ae3eac7c8b1220c38344e6b7a4c2b8fb4c3774bfd1826788b57a112bfb4a5ed5aa6c396dea123f67778676d4c4af1dec363208a4d43e", 0x86, 0x40800, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f00000001c0)="555b3074a5357c1b443482291a3f4f6f30769ee79c245bad0179fb36c972bf2c03eb324c742fa3bc5a1b1b8d63cd72ce0a5da40dc8769c76ad9da05de6df8b4399baf1c18fb4d50c3495015b585e5983ae3eac7c8b1220c38344e6b7a4c2b8fb4c3774bfd1826788b57a112bfb4a5ed5aa6c396dea123f67778676d4c4af1dec363208a4d43e", 0x86, 0x40800, 0x0, 0x0) listen(r0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) getsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000080)=""/202, &(0x7f0000000180)=0xca) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) [ 205.725480][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 205.727738][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x0, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:25 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="2be0213d4c14f29ec4daf1b84ea248fa8a4b49e4c3ec4d746918058b62b1abc92108f926303e", 0x26}, {&(0x7f0000000140)="1190881fe5c7830aeb448bb4ebc84aafac13c1e64c1533f90d7a7e236bba0175c0f65f38d4d37201f6d5e6da21df288b5c3198a2328a43ac467e176afc0d76962e78e6f1cb385216d4b20fd5f2119b3fa1cafe2d0efd3e3d121c2f68d17f8717a72706ebed3c3a8b1a1a2ea98ef22fa51384fbc121eb", 0x76}, {&(0x7f00000001c0)="84c7eff2e6c6f1557980b9897952ff154771ae190762afd1e36934876d0aa83956811d601a67027152285085d98a540b95c795dca8941877d5706cf99551e4", 0x3f}, {&(0x7f0000000200)="bd9ba73a7946a8ab71a763243b128d96e17d0dcc0c715c1bb9bedd0748fea99befa7fd18a933c45be0e2aa10e4d0a6726871bc790b4a47fdff318d7032c9fd6634a60c25965c9995884e75f9eff078366af7ccb42635", 0x56}, {&(0x7f0000000280)="9984afdadfc8866158fde5b731c396d28fb305f735f2684c0661202d14893f1da4e83d51bfefceb7a349ba6974563b253dc1b27d8461ef33f97301131cbb06798c8a43cbd68684fa3531bf283d4c1129d944966c8057abe8f5f811c79180d1e8e90c", 0x62}, {&(0x7f0000000300)="3364a57d8fe9fce1ccff4c353f18249b8ab4e081d17bb324f5c21ee4a624eff12923dc2011a555384de6ad5892", 0x2d}], 0x6, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}}, {{&(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000440)="1233a5262eb14cd5f56420a015b5403b0aec32be20419dcc512a0bc2d5fb279bff0909cf29682b74b0aa1882d637b9c57c7a66eed7ab139151620ddd0d85fb64dd4ac84605cf2d70fa5dd1aa13a952f9c69534c8e7ec23517a3d09768b1ffea4fc7117fbc63a7b9b5456df139476c48b91e1b5dfe518733f7d3fa525fb1fccd8e1669f72899ba4b2bb0418b3d26f00b9ecd106e2bb77ab912d6ba4ea13a3a5dbec410f952e10623b6fc27fe16b3bff335d3f0c3da4e6ff7a16a3f76e", 0xbc}, {&(0x7f0000000500)="b9a6bb5c0e0332140e8584a61a452e7a6f31d679eb5ea2b2f5b0edf767a92c0ae68d5636bdf9a201ff15eebc51461f367bf4ab97d0cc6f33b4ba3c4e0bf830f6e5ce4111bc40ceaf701e4b4a698b47d983defe52c165b2793cc7dc2a12f68f35fac5833e31d368b34be6598cba93b8655b236d14b2097fe949d4ca121bf32860094b5504bafa6c73a86df9f62654e3f5675e729bacd89025eb0ba1984bf0bc54c4a12aba70da748205cf880915e7e83bb763da785ffa6fd66a43516f884758d1a46d3bf29aaf8c8bdbb039b9b16f421ccb096ed7d13c8602d859c82aae0f6b05880762caf6d333ad1589fa1fca20e90807", 0xf1}, {&(0x7f0000000600)="ea74f796c4946da836132fd1d1c311440473974f4b8177c325825bfc0f5e8ef9aecdf200ccb2ce3e0f8f9c699facf388f76fc092e6ee23ef0a8465328472189a02937f26fb3447ade48e93305f5438420350241a1caab34d169d7801decfdb4e6eea743254eeae34464a584726b91d16775df06759bd9957de36eb5254df6ca82d23fd8b906cf7fee1f2e19f13b4b62767b65568a610c91b1b0bec0964e17c7bb83bc1fcccc23171ba05169f079a0399ca5e24651b502c42ad0030f85eb0d3e9dab27740d430db4bdf100f833ac06da9a1c826e387155cd345c0011e4e1ed42ac946c21ddc3dbe16c6366aa7fa15d1b4", 0xf0}, {&(0x7f0000000700)="f7fd362b723e586265cc1e3c2ab1e2f78528529270abea1e8d05788c6cb625ef93ea1a73803cacd7ba63b378f02a1ce6d6cc8b269dbe444e33dd76fd01824972a5bcd0ca81117f8f555670b3d6436e1a52c051930e03ae2a401ec582aec912f6bb96beb42818208ec68e", 0x6a}, {&(0x7f0000000780)="e7ea4f9e31bfa1211fd48f31a79a2be952a0fe82b7d894c87a75c5c779fc3308751a10e51747b500010a41d1dfaa1529a1cf25fca17e28484501295d93be4b86f3d7ea0a22e35fd5134c01d2d8a5f238bb87eb311b180c9afd02de9a7d05edc5fe7dd8602df77a3e383d362bbde2ee05bd4266c3262d", 0x76}], 0x5, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffc01}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0xc5, 0x1, 0x4, [{@broadcast, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x200}, {@remote, 0x5}, {@multicast2, 0x6705}, {@empty, 0x4}, {@rand_addr=0x64010101, 0x6}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010100, 0x5}, {@broadcast, 0xf6e}]}, @timestamp={0x44, 0x14, 0x6d, 0x0, 0x7, [0x7fff, 0x6, 0x8, 0x1]}, @lsrr={0x83, 0x1b, 0x6, [@empty, @local, @private=0xa010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1e}, @remote]}, @generic={0x88, 0x5, "44f845"}, @generic={0x16, 0x2}, @end, @cipso={0x86, 0x24, 0x3, [{0x1, 0x7, "4d53e55549"}, {0x2, 0x12, "e4311ec64e5975238f8a0a298a1c29ba"}, {0x7, 0x5, "c13689"}]}, @ssrr={0x89, 0x13, 0x1e, [@loopback, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @local]}, @ssrr={0x89, 0xf, 0x1f, [@broadcast, @rand_addr=0x64010101, @multicast1]}, @ssrr={0x89, 0x2b, 0x40, [@broadcast, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @local, @empty, @multicast1, @rand_addr=0x64010102, @local, @multicast1]}]}}}], 0x128}}], 0x2, 0x4000) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(&(0x7f0000000a40)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb}, "0d78a85b2f0e002a70a800"}, 0xf) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x5, 0xc9, 0x5, 0x6}}}, 0x10) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 205.771269][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 205.781347][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.784359][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 205.787073][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.792390][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:25 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xff, @private1, 0x5}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="555b3074a5357c1b443482291a3f4f6f30769ee79c245bad0179fb36c972bf2c03eb324c742fa3bc5a1b1b8d63cd72ce0a5da40dc8769c76ad9da05de6df8b4399baf1c18fb4d50c3495015b585e5983ae3eac7c8b1220c38344e6b7a4c2b8fb4c3774bfd1826788b57a112bfb4a5ed5aa6c396dea123f67778676d4c4af1dec363208a4d43e", 0x86, 0x40800, 0x0, 0x0) (async) listen(r0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) getsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000080)=""/202, &(0x7f0000000180)=0xca) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:25 executing program 3: bpf$PROG_LOAD(0x19, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:25 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000000)={0x0, "8577a400a8f2500633753d81d802f476"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001000)={r1, 0x0, 0x1, [0x0, 0x8000000000000000, 0x0, 0x5be5, 0x4], [0x10001, 0x4, 0x68d4, 0x7289, 0x5, 0xdab8, 0x1, 0xe071, 0x1, 0x3, 0x8c, 0x7fffffffffffffff, 0x6, 0x100, 0x7, 0x7f, 0x17fc, 0x8, 0xffff, 0x0, 0x6, 0x0, 0x800, 0x100000001, 0xad9, 0x7, 0x5, 0x3f, 0xa6d5, 0x242, 0x9, 0x652, 0xffffffffffffffff, 0x0, 0x400, 0x6, 0x5, 0x4, 0x8, 0xfffffffffffffc00, 0x1, 0x6, 0x7fff, 0x712, 0x0, 0x9, 0x2, 0x7fff, 0x17e, 0x3, 0x9, 0x2, 0x7fffffffffffffff, 0x0, 0x3, 0x8, 0x7, 0x2, 0xffffffffffff8000, 0x7fffffffffffffff, 0x8, 0xb9, 0x77888100, 0xfffffffffffffff8, 0x6, 0x2, 0xff, 0x4, 0x7, 0x5, 0x10001, 0x42, 0x3ff, 0x100000001, 0x4, 0x3fa2, 0x1f, 0x98, 0xffffffffffff8000, 0x4, 0x32, 0x4ef9e8eb, 0xfffffffffffffbff, 0x9, 0x8, 0xffffffffffffff54, 0xb2, 0x9, 0x8001, 0x0, 0x1, 0x8000000000000001, 0x5, 0x100, 0x0, 0x0, 0x4, 0x3ce, 0x1000, 0x0, 0x9, 0x400, 0x3, 0x8, 0x5, 0x8, 0x5, 0x400, 0x8, 0x6, 0x80, 0xfffffffffffff801, 0x80, 0x1ff, 0x2a9, 0x9, 0x1800000000000000, 0x8, 0x7ff, 0x0, 0x1]}) r2 = socket$inet6(0xa, 0x6, 0x0) listen(r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/247, 0xf7) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000001440)=""/187, &(0x7f0000001500)=0xbb) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) 00:03:25 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x7, 0x481c, 0x7, 0x7}}}, 0xa) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:25 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4004) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x50000) write(r2, &(0x7f0000000680)="e589891e0d6dac0f6c0edda84d75456e845813b83bdc092a1129f61369e27f4e4e37ea5e23e476981838fc7e0a219103b963818a3c45e33d3615b2e04006a6a2ce7031cc7f39c02422e25b900b617f0b4ce379909359b2d00f699556cee892cc6ce40698a65a878d3686b44d7c5f5f4f4e7048df7a28cf877fb18be21331314cfd921a89376ec36885920e1bb3696aabe957f7eac00f0e057a24f2bf9d5ab66b15f4d576f1596f50038265487d5c30400e3a025c4e6f2473690e3a4b0ed701414185647137d8", 0xc6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000300), 0x4) (async) mknodat$loop(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x1000, 0x1) (async) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x4, @loopback, 0x200}, 0x1c) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40043}, 0x8000) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc, 0x1000, 0x1}, 0x20) sendto$inet6(r3, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a00)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x48}}, 0x0) (async) recvmsg(r6, &(0x7f0000000640)={&(0x7f0000000480)=@nl=@unspec, 0x80, &(0x7f0000000500)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1, &(0x7f0000000540)=""/193, 0xc1}, 0x20) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0x100f}, {0x0}, {0x0}], 0x3}, 0x400800}], 0x1, 0x122, 0x0) shutdown(r3, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) (async) r8 = accept(r0, &(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f00000002c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000800)={'sit0\x00', r7, 0x80, 0x1, 0x7e8, 0x40, {{0xc, 0x4, 0x0, 0x9, 0x30, 0x66, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x10, 0x5f, 0x0, 0x3, [0xfffffffd, 0x6e4a, 0xffff]}, @timestamp_prespec={0x44, 0xc, 0xf, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0xf}, 0xfffffe00}]}]}}}}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="da6bd1dab1b4749f4ddf072825051f9c14d6c4f9619bcb71f0e40ae4d91e960640d391e98e9e198259a6e32e1433ccdcbbc680b536891a5a57b82f2a9f97e90743e4b2d943097dbfe4d1b191d21df9729e2ac1b03abe0294c3c51b51d8da2aea06886f74af80295a98e7b4ee4de731a2821f209e5c7ab74d4c1080cdd5e73facfc7bbcca0cc472e1e65dd20541ee029f0ad0aed46d7077b0253b5e6840a21259f7b160d0e10eaa49", 0xa8, 0x1, &(0x7f0000000440)={0xa, 0x4e21, 0x3ff, @private1, 0x200}, 0x1c) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) [ 205.884815][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.895604][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 205.897812][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 205.900502][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 205.902512][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 205.904587][ T5586] Bluetooth: hci2: Malformed Event: 0x02 00:03:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) (async, rerun: 64) fallocate(r0, 0xc, 0x1, 0x6) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x10000000) (async) write$cgroup_int(r0, &(0x7f0000000380), 0xb14c) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffbfe}) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (rerun: 32) getdents64(r4, &(0x7f0000000180)=""/247, 0xf7) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (rerun: 32) getdents64(r5, &(0x7f0000000180)=""/247, 0xf7) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x50, 0x0, r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', r5, 0x0, 0x1, {0x0, r6}}) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_deladdr={0x48, 0x15, 0x100, 0x70bd2a, 0x25dfdbfe, {0x2, 0x3f, 0x21, 0xfe}, [@IFA_LABEL={0x14, 0x3, 'bridge0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0xbdb4}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x9f7, 0x20, 0xa9f1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) 00:03:25 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x7, 0x481c, 0x7, 0x7}}}, 0xa) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) 00:03:25 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) (async) listen(r0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000000)={0x0, "8577a400a8f2500633753d81d802f476"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001000)={r1, 0x0, 0x1, [0x0, 0x8000000000000000, 0x0, 0x5be5, 0x4], [0x10001, 0x4, 0x68d4, 0x7289, 0x5, 0xdab8, 0x1, 0xe071, 0x1, 0x3, 0x8c, 0x7fffffffffffffff, 0x6, 0x100, 0x7, 0x7f, 0x17fc, 0x8, 0xffff, 0x0, 0x6, 0x0, 0x800, 0x100000001, 0xad9, 0x7, 0x5, 0x3f, 0xa6d5, 0x242, 0x9, 0x652, 0xffffffffffffffff, 0x0, 0x400, 0x6, 0x5, 0x4, 0x8, 0xfffffffffffffc00, 0x1, 0x6, 0x7fff, 0x712, 0x0, 0x9, 0x2, 0x7fff, 0x17e, 0x3, 0x9, 0x2, 0x7fffffffffffffff, 0x0, 0x3, 0x8, 0x7, 0x2, 0xffffffffffff8000, 0x7fffffffffffffff, 0x8, 0xb9, 0x77888100, 0xfffffffffffffff8, 0x6, 0x2, 0xff, 0x4, 0x7, 0x5, 0x10001, 0x42, 0x3ff, 0x100000001, 0x4, 0x3fa2, 0x1f, 0x98, 0xffffffffffff8000, 0x4, 0x32, 0x4ef9e8eb, 0xfffffffffffffbff, 0x9, 0x8, 0xffffffffffffff54, 0xb2, 0x9, 0x8001, 0x0, 0x1, 0x8000000000000001, 0x5, 0x100, 0x0, 0x0, 0x4, 0x3ce, 0x1000, 0x0, 0x9, 0x400, 0x3, 0x8, 0x5, 0x8, 0x5, 0x400, 0x8, 0x6, 0x80, 0xfffffffffffff801, 0x80, 0x1ff, 0x2a9, 0x9, 0x1800000000000000, 0x8, 0x7ff, 0x0, 0x1]}) r2 = socket$inet6(0xa, 0x6, 0x0) listen(r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/247, 0xf7) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000001440)=""/187, &(0x7f0000001500)=0xbb) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) [ 205.930829][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:25 executing program 3: bpf$PROG_LOAD(0x1a, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 205.969141][ T6050] Bluetooth: hci2: Malformed Event: 0x02 00:03:25 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000000)={0x0, "8577a400a8f2500633753d81d802f476"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001000)={r1, 0x0, 0x1, [0x0, 0x8000000000000000, 0x0, 0x5be5, 0x4], [0x10001, 0x4, 0x68d4, 0x7289, 0x5, 0xdab8, 0x1, 0xe071, 0x1, 0x3, 0x8c, 0x7fffffffffffffff, 0x6, 0x100, 0x7, 0x7f, 0x17fc, 0x8, 0xffff, 0x0, 0x6, 0x0, 0x800, 0x100000001, 0xad9, 0x7, 0x5, 0x3f, 0xa6d5, 0x242, 0x9, 0x652, 0xffffffffffffffff, 0x0, 0x400, 0x6, 0x5, 0x4, 0x8, 0xfffffffffffffc00, 0x1, 0x6, 0x7fff, 0x712, 0x0, 0x9, 0x2, 0x7fff, 0x17e, 0x3, 0x9, 0x2, 0x7fffffffffffffff, 0x0, 0x3, 0x8, 0x7, 0x2, 0xffffffffffff8000, 0x7fffffffffffffff, 0x8, 0xb9, 0x77888100, 0xfffffffffffffff8, 0x6, 0x2, 0xff, 0x4, 0x7, 0x5, 0x10001, 0x42, 0x3ff, 0x100000001, 0x4, 0x3fa2, 0x1f, 0x98, 0xffffffffffff8000, 0x4, 0x32, 0x4ef9e8eb, 0xfffffffffffffbff, 0x9, 0x8, 0xffffffffffffff54, 0xb2, 0x9, 0x8001, 0x0, 0x1, 0x8000000000000001, 0x5, 0x100, 0x0, 0x0, 0x4, 0x3ce, 0x1000, 0x0, 0x9, 0x400, 0x3, 0x8, 0x5, 0x8, 0x5, 0x400, 0x8, 0x6, 0x80, 0xfffffffffffff801, 0x80, 0x1ff, 0x2a9, 0x9, 0x1800000000000000, 0x8, 0x7ff, 0x0, 0x1]}) r2 = socket$inet6(0xa, 0x6, 0x0) listen(r2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/247, 0xf7) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000001440)=""/187, &(0x7f0000001500)=0xbb) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) 00:03:26 executing program 3: bpf$PROG_LOAD(0x1b, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 206.021556][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.025301][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 206.029053][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.031398][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:26 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x7, 0x481c, 0x7, 0x7}}}, 0xa) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:26 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) (async) fallocate(r0, 0xc, 0x1, 0x6) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x10000000) (async) write$cgroup_int(r0, &(0x7f0000000380), 0xb14c) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffbfe}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/247, 0xf7) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000180)=""/247, 0xf7) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x50, 0x0, r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', r5, 0x0, 0x1, {0x0, r6}}) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_deladdr={0x48, 0x15, 0x100, 0x70bd2a, 0x25dfdbfe, {0x2, 0x3f, 0x21, 0xfe}, [@IFA_LABEL={0x14, 0x3, 'bridge0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0xbdb4}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x9f7, 0x20, 0xa9f1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) 00:03:26 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4004) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x50000) write(r2, &(0x7f0000000680)="e589891e0d6dac0f6c0edda84d75456e845813b83bdc092a1129f61369e27f4e4e37ea5e23e476981838fc7e0a219103b963818a3c45e33d3615b2e04006a6a2ce7031cc7f39c02422e25b900b617f0b4ce379909359b2d00f699556cee892cc6ce40698a65a878d3686b44d7c5f5f4f4e7048df7a28cf877fb18be21331314cfd921a89376ec36885920e1bb3696aabe957f7eac00f0e057a24f2bf9d5ab66b15f4d576f1596f50038265487d5c30400e3a025c4e6f2473690e3a4b0ed701414185647137d8", 0xc6) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 64) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000300), 0x4) (async, rerun: 32) mknodat$loop(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x1000, 0x1) (async) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x4, @loopback, 0x200}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40043}, 0x8000) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc, 0x1000, 0x1}, 0x20) (async) sendto$inet6(r3, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a00)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x48}}, 0x0) (async) recvmsg(r6, &(0x7f0000000640)={&(0x7f0000000480)=@nl=@unspec, 0x80, &(0x7f0000000500)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1, &(0x7f0000000540)=""/193, 0xc1}, 0x20) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0x100f}, {0x0}, {0x0}], 0x3}, 0x400800}], 0x1, 0x122, 0x0) (async, rerun: 32) shutdown(r3, 0x0) (rerun: 32) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) r8 = accept(r0, &(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f00000002c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000800)={'sit0\x00', r7, 0x80, 0x1, 0x7e8, 0x40, {{0xc, 0x4, 0x0, 0x9, 0x30, 0x66, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x10, 0x5f, 0x0, 0x3, [0xfffffffd, 0x6e4a, 0xffff]}, @timestamp_prespec={0x44, 0xc, 0xf, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0xf}, 0xfffffe00}]}]}}}}}) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="da6bd1dab1b4749f4ddf072825051f9c14d6c4f9619bcb71f0e40ae4d91e960640d391e98e9e198259a6e32e1433ccdcbbc680b536891a5a57b82f2a9f97e90743e4b2d943097dbfe4d1b191d21df9729e2ac1b03abe0294c3c51b51d8da2aea06886f74af80295a98e7b4ee4de731a2821f209e5c7ab74d4c1080cdd5e73facfc7bbcca0cc472e1e65dd20541ee029f0ad0aed46d7077b0253b5e6840a21259f7b160d0e10eaa49", 0xa8, 0x1, &(0x7f0000000440)={0xa, 0x4e21, 0x3ff, @private1, 0x200}, 0x1c) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) 00:03:26 executing program 3: bpf$PROG_LOAD(0x1c, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 206.122321][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 206.132965][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.138081][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 206.140314][ T5586] Bluetooth: hci2: Malformed Event: 0x02 [ 206.142477][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.144873][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:26 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:26 executing program 4: syz_emit_vhci(0x0, 0xfffffffffffffe9a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "92c8c8ab1cc20186a3927f33d4fb79d3c74f63b6f56f3520532ceb4eb76f745865719fb11eca4769e4c314c112ac3bdf56809084864f2bde1edb63b4184d9e3a5743f0c91cc63959cf05f9b412ffda206d19b9adbfb0eec6df9df5c6418d67eac6dbd32fd2be086b7e3cb466fdc1d497aad73eded31c71be8beea412cd6059342b88b4394aaec9e18d8d9837fd02e84fa15a337e1be9470f47e912f19f52f4df1683af6d236b9c9a2d63918d6d2ad05fbf4b3916"}, 0xb8) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) 00:03:26 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4004) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x50000) write(r2, &(0x7f0000000680)="e589891e0d6dac0f6c0edda84d75456e845813b83bdc092a1129f61369e27f4e4e37ea5e23e476981838fc7e0a219103b963818a3c45e33d3615b2e04006a6a2ce7031cc7f39c02422e25b900b617f0b4ce379909359b2d00f699556cee892cc6ce40698a65a878d3686b44d7c5f5f4f4e7048df7a28cf877fb18be21331314cfd921a89376ec36885920e1bb3696aabe957f7eac00f0e057a24f2bf9d5ab66b15f4d576f1596f50038265487d5c30400e3a025c4e6f2473690e3a4b0ed701414185647137d8", 0xc6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000300), 0x4) mknodat$loop(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x1000, 0x1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x4, @loopback, 0x200}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40043}, 0x8000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc, 0x1000, 0x1}, 0x20) sendto$inet6(r3, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a00)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x48}}, 0x0) recvmsg(r6, &(0x7f0000000640)={&(0x7f0000000480)=@nl=@unspec, 0x80, &(0x7f0000000500)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1, &(0x7f0000000540)=""/193, 0xc1}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0x100f}, {0x0}, {0x0}], 0x3}, 0x400800}], 0x1, 0x122, 0x0) shutdown(r3, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) r8 = accept(r0, &(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f00000002c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000800)={'sit0\x00', r7, 0x80, 0x1, 0x7e8, 0x40, {{0xc, 0x4, 0x0, 0x9, 0x30, 0x66, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x10, 0x5f, 0x0, 0x3, [0xfffffffd, 0x6e4a, 0xffff]}, @timestamp_prespec={0x44, 0xc, 0xf, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0xf}, 0xfffffe00}]}]}}}}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="da6bd1dab1b4749f4ddf072825051f9c14d6c4f9619bcb71f0e40ae4d91e960640d391e98e9e198259a6e32e1433ccdcbbc680b536891a5a57b82f2a9f97e90743e4b2d943097dbfe4d1b191d21df9729e2ac1b03abe0294c3c51b51d8da2aea06886f74af80295a98e7b4ee4de731a2821f209e5c7ab74d4c1080cdd5e73facfc7bbcca0cc472e1e65dd20541ee029f0ad0aed46d7077b0253b5e6840a21259f7b160d0e10eaa49", 0xa8, 0x1, &(0x7f0000000440)={0xa, 0x4e21, 0x3ff, @private1, 0x200}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) 00:03:26 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_DELMDB={0x38, 0x55, 0x10, 0x70bd25, 0x25dfdbfe, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48044}, 0x1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@broadcast, @broadcast, r1}, 0xc) 00:03:26 executing program 3: bpf$PROG_LOAD(0x1d, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 206.218137][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:26 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_DELMDB={0x38, 0x55, 0x10, 0x70bd25, 0x25dfdbfe, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48044}, 0x1) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@broadcast, @broadcast, r1}, 0xc) 00:03:26 executing program 4: syz_emit_vhci(0x0, 0xfffffffffffffe9a) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "92c8c8ab1cc20186a3927f33d4fb79d3c74f63b6f56f3520532ceb4eb76f745865719fb11eca4769e4c314c112ac3bdf56809084864f2bde1edb63b4184d9e3a5743f0c91cc63959cf05f9b412ffda206d19b9adbfb0eec6df9df5c6418d67eac6dbd32fd2be086b7e3cb466fdc1d497aad73eded31c71be8beea412cd6059342b88b4394aaec9e18d8d9837fd02e84fa15a337e1be9470f47e912f19f52f4df1683af6d236b9c9a2d63918d6d2ad05fbf4b3916"}, 0xb8) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async, rerun: 32) syz_emit_vhci(0x0, 0x0) (rerun: 32) [ 206.252909][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.255015][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 206.257017][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.259432][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:26 executing program 2: syz_emit_vhci(0x0, 0xfffffffffffffe9a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "92c8c8ab1cc20186a3927f33d4fb79d3c74f63b6f56f3520532ceb4eb76f745865719fb11eca4769e4c314c112ac3bdf56809084864f2bde1edb63b4184d9e3a5743f0c91cc63959cf05f9b412ffda206d19b9adbfb0eec6df9df5c6418d67eac6dbd32fd2be086b7e3cb466fdc1d497aad73eded31c71be8beea412cd6059342b88b4394aaec9e18d8d9837fd02e84fa15a337e1be9470f47e912f19f52f4df1683af6d236b9c9a2d63918d6d2ad05fbf4b3916"}, 0xb8) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) 00:03:26 executing program 3: bpf$PROG_LOAD(0x1e, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:26 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 206.295659][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 206.318582][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:26 executing program 4: syz_emit_vhci(0x0, 0xfffffffffffffe9a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "92c8c8ab1cc20186a3927f33d4fb79d3c74f63b6f56f3520532ceb4eb76f745865719fb11eca4769e4c314c112ac3bdf56809084864f2bde1edb63b4184d9e3a5743f0c91cc63959cf05f9b412ffda206d19b9adbfb0eec6df9df5c6418d67eac6dbd32fd2be086b7e3cb466fdc1d497aad73eded31c71be8beea412cd6059342b88b4394aaec9e18d8d9837fd02e84fa15a337e1be9470f47e912f19f52f4df1683af6d236b9c9a2d63918d6d2ad05fbf4b3916"}, 0xb8) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0xfffffffffffffe9a) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "92c8c8ab1cc20186a3927f33d4fb79d3c74f63b6f56f3520532ceb4eb76f745865719fb11eca4769e4c314c112ac3bdf56809084864f2bde1edb63b4184d9e3a5743f0c91cc63959cf05f9b412ffda206d19b9adbfb0eec6df9df5c6418d67eac6dbd32fd2be086b7e3cb466fdc1d497aad73eded31c71be8beea412cd6059342b88b4394aaec9e18d8d9837fd02e84fa15a337e1be9470f47e912f19f52f4df1683af6d236b9c9a2d63918d6d2ad05fbf4b3916"}, 0xb8) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(0x0, 0x0) (async) [ 206.322360][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 206.328459][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.334082][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:26 executing program 3: bpf$PROG_LOAD(0x21, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:26 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 206.352432][ T6050] Bluetooth: hci5: Ignoring connect complete event for invalid link type 00:03:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xa, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000d5000000f2ffffff95"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bind$packet(r1, &(0x7f0000000000)={0x11, 0x4, 0x0, 0x1, 0x81, 0x6, @local}, 0x14) 00:03:26 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @mcast1={0x0}, @private1, [@hopopts={0x11}], "fafb17c1b3979f20"}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) [ 206.386921][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 206.394613][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xa, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000d5000000f2ffffff95"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bind$packet(r1, &(0x7f0000000000)={0x11, 0x4, 0x0, 0x1, 0x81, 0x6, @local}, 0x14) 00:03:26 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0xd2, 0xc8}}}, 0x5) 00:03:26 executing program 1: socket$inet6(0xa, 0x6, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_DELMDB={0x38, 0x55, 0x10, 0x70bd25, 0x25dfdbfe, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48044}, 0x1) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_DELMDB={0x38, 0x55, 0x10, 0x70bd25, 0x25dfdbfe, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48044}, 0x1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@broadcast, @broadcast, r1}, 0xc) 00:03:26 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @mcast1={0x0}, @private1, [@hopopts={0x11}], "fafb17c1b3979f20"}}}}}}}, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) 00:03:26 executing program 3: bpf$PROG_LOAD(0x22, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 206.449188][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.451449][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 206.453520][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.455822][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xa, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000d5000000f2ffffff95"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bind$packet(r1, &(0x7f0000000000)={0x11, 0x4, 0x0, 0x1, 0x81, 0x6, @local}, 0x14) 00:03:26 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x0, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 206.498460][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:26 executing program 3: bpf$PROG_LOAD(0x23, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:26 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) accept(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) 00:03:26 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "4035cacfd46d2b9046d14c8b1ec529600c762c6773c1d6cc481d9acb1aa14d2b0da7538ba2ede7f83059eadea80f8f2e87b11cc72c2aa937b0934db6a07c3a677b39104ee26fe9579f653d49d13bcf9748b9bbdb06c8c6826c54c90cdd652803203f410b1df43817ec8d3d983ace6f6155bef3f4dee630c62879e23d4838c9da79e20857c3bc71ab93884e9c09b8f01cd8a855443ebe7d4241db2d8bb563c002909b55d5d798fa1da023160afd6cb6b8d05d6a3e6b19a331c9cb18ee268af3c427c2a766792bcd83f01bcfeac6ceb9ca252de2f19a10dc5de02f7c14ece32b28bd286f929cad91232a772ccceac83dfafb8ecb1d1fb9f514dad04b8e89fa3864d1fc5c8d3ef847d153d50ec6a0e18b9ee8abc7dd236842ee14ea69608e73d82bf01af8fcbc7ae81c1389288d79c9b6da6323cb7d760088e700597dd34bdee4b670504ab04f99721180ea01fc5efc07020e8964c32a6e4fcf68e392a2e89163e1da31f2e2912a8e1d79bc9ecbc9d3dff5a0664063be8f0deda9b456e8b4fccff605e83d26c9da5f038d78dd9933b86ee92da5ce560f3330ca11042700bad4005a019bbc1657eafa5c99c26bb211058f9f206cfe09ed25373574e413df26c4a61088d6571f506bf3c49fe285c6add678b9a3c4b76da80692b749cbeeffbc85d7244862e148ee5be47408b76d5ae80954eab3accd825ffc07c64fb22b651699911e888926031b22a145b63504c9aa734147acba0f4d2d91ed27e8d6857ce90c7d25cc4c3d544a4e39a1ad5f2480f0b967914220e1228e9988543b67cb959b65c41935d8423cf160e320609b0026d416ccf5865d92ff74b3c12bd7f91026ddbbe84737d859393156fe96a1b56fb16811f16f58079866a467f6d63b1487b86d17feed9df4f2e350a5873d469493fef8442b57a822af6a5173111096da2f7d156d20e9223df3b0c6f98ad0304e4ef83b896b4913bd76c3de1e6c66b162ce49173909afde62781cfe263c23c2b17d4eae9626fccf7bcb350580311c3d8220cdff76b0f19cac1c7b2a1ab1263f9868f8b7ada2afcd9da71f076c9d264f364223bea80ce5850981a41a5a1aa8e965bd29d2cd51627bf2c7911cbe536b11cf232b549d38690a54218878fa14dd43b8c14b4aa2d6a352ae3dd76427ac19d12a7411631be224bab1b37dcf20bdb2cb6733b65dd860bfa801f561f6e775bdf1ab298a200c7a9ef1e2ebd0f8bc841401e6bfb108685ad1f3feb67da2734512800b16fd24413de28a500355e18d840a6064a2008123f16111697169e3d98d8896c367dedcddfb9ca7f2d2ff03c38592fa98d78d7a1d702e7387011e1f15c9f3b4c2f0378a9f6b457a069f08ed6c3be5224f2e981cf72fa9161fc536ab0b13e5d8199a324a7d8d2ce40da2950f6584bf951b1b53856d60dd976b032cae5ae5c22a679922cdb808a44b89b4fe0a01c836e8bae854284e472d5184126fc9528f8e8cfd45e4ed78ddda39d31118fc1082f34d9695d001cc57db2ec1c1ca8e0bb15ea932b77ed121c71e0534f72c32499bb5d03e855d1bb80696d18733127ad7e60c65f7cd4950eff6e849ce041083982d2cf2f575d4fd62542758002f1862e5e46dea8662a8bd868e271e305300ccdb15f372a58b06b78bd37f036b7292ef69e1c0712cf93d66453d273a53a563cac6f9ed2397e93bf5a9d281f93af247b2c4ef5c8b0bbeb5496364a707cdc032751eab6aa9247358497c0ec34d136d4470e44376faa9079baf1be4cd9d090216dc3248597a6b18927676d5354e9477f30821751b99c49931c1a657821b8b1cc925392b15107960d5ac38011c61c24c921c77677a99b704ff8e32fe268fcaa01195057652400a4bf37a1475ad55040816992e2cc0756e639547b2bef4884b3debe43f31f1f6112a6e2b74d194bcad53fe98cf6febeb13614406279d8b9f522b4e6d9480cf7222209f16a25272da106021cfd7033efb1621c97136cc5e7b7a88a81377c22725acd2ac4b9329e1d65b07b82879f4e71de7b6ee2299b08d31b6e842b2ad1bad27a4e25715c605e5282fb49b4b4083ea994d210a476f47c364e40aea0337d8f1424bbcc71ea33558a6bd4a63a6ba312c75c0219899875e981450694ed1f5eea3db9caa89bfa07df5360f73e5ef69bbdf1de14af56f72127c2821937ab78db370b37152134e31d5ca0a1da93cdeee2de0d801b0ea74187e7c2201ca3aff585c8acac85020f6bedb144655004c1ca9eb4e6bda3c9671084059baf79a187c1dedc1dc90c1e902a78f555f8b77ec46ca025c598f34f72734181d1e70ab5eff610658a6d4688a924d54ef10b1c2f4a1fd230dccb8070e18f47c8b45eb295d3152ca50d491e72296c911fa203d4417b3c4d56c59dc2aa4ce13b22f15cd883a02c42ec525a344d1a6282f811465c9621a99b980a5f4ee33460baf4eb42d403734786c76e00e211f6c9c97a0c494fd6dcfe7a4c377a5f37a4dacca5389fabe163fbcada3d101c6d9246d06620387e258b7b3b55fcfd4d911cefdc7b748dc723dabe956de77071c3f9e41f40cb61a68453fa7ea3e7b72269b77b3d9dc97cb501f5a8a59d7044c59fa6682dbcb908f453a1e42cf5634d164003cdb8b791e496bdc7e650265b9846cb30c463d8eed32eba239f239878575c2838f5a2aabe07c549c2572df12d5b965e03028507adf6b02c8d567dba010aad4f7bd9074e4b9b0c357fa174f631718ab82228ea2d1904e02c28b5d133fbe38262ed455bd9a455d282957e5b6cc7d844b56189fa86edc69cb210972af1ad987e74af844b4ced43fb437f79a692ca3c59405d5997e895e144f0f0e37b6678c01d8935538fa121a4d3d10e4920fca7049513f0d778ea0af91b2e78f34a3cb8b87f0e972d4fa3819ecca9505d361dd04b22beed7d3e2f0e7fd78bd7d2fd4f02b981164afe60558f0c1056c7d18982d893839453eac0c809ae12ef7d98bb6cf9725e4f381c51bf01cf9de17300ce5aaf3de5a23a1b9d1c288912f5b463a4520460379dc251ec366af81ada230ed62ecf8d88811b5642435c88ab8338b5252b81386a4d9f8aea5737ca9a5022132f1a66860cbcab598a5bb39b9fce000e665bb3e53ae1d8a62e75cc92a677ee0781fefd0802229d664aa1c25bc496ff359410f5cb17b728b31bdc6df88c7ca8210ca56ee421279984d33c480963455341aa735e4abd4adfa5125c47588718062d9878bf874246f5c67331a4f5f65f0d5baff69a69aee1f53c0a6a46d37cbb4abbef9c96ecf589711a1550e9de24fe42fbf5406d1f3e572fa8621971e2735ac36eaa6b4fe4db77e014686caedee2fd45422db0fd27db286f109ff957a59f86db3872f87d05efe086088281f78ff5295cae56cb57fccf0292069711a9efacedb449c18bc276343181d192a7a8118c7ec4a1b2bde5e1f7300c48f41bb0019a913bde42a56046d800a5cd47a3503c2e4c344f1882577cc6107a64112c304a4967b46034b1f3fab07ba63c8f1d58fb4cda17119ffa5649203b28301108b997a596fe1d36b16c9c192ac9bdbab9c31e2519c315eb1db00c239cf0a0d31ed7543ed2f6d837dbe4d902df63b9c23b512774afcde751846c31ea2f9c4190178787889bcd58c867cedf2f106bffb2f820d3958d5275bd8d350551a51dbc5702a4e5219467f98ecf8cc66f9ba0b781080ab6d3743e3ed5133b6d7e00cb6fb59a0172afe146763ec4c5924bdc0fd80aaae262d4188a25753ba0fc14771dd5ac0410c429457692bc27167abbac8fc0359581716b84c0a188c445538c8f2fe22721b3c86844404e248b5169764b2acd10fdc9d2f10839e73b4c17ce96102d078c5962ee1d914d02a9b7c04d2f002c177039a5433ffdcb58b249223b9872dd9272ea1563c57fe8ed305f87deda3b916a736d91551ade4c2348b7f9d6d9b8b5a404f2846d6e472ce2304193ccc8def68afc86aa77123ee15d23fbc12fcadb75923f9ece07af62b75fe65e8c7e548795e6f362635c1e87c15179ce32e68647c377cc10e0bd503dbe5f1b1c71563cfb39f0f89f0c083a74d6027ced0a3a014f30c303c85081dee991d6b784aa7db473c74e916a8007c1ad4ce66cc92e647441080a42418e6f1e2ec479b20c18a6858581333695e235b27c417bd3294644d1db44f1e9a787f4cc2ef36b1cd8b910cb6c93984ed5f0a6b5bd866e0f21b32c81e56bbac668a36969cc30acefb851f7af2c18af8973d968077a4fa3cdf1b48f4fc116b3291a195220e4379ce484bf666d2a54604a1b0ba1d28a219bab16418f0ed6848586337f2be646bc9ec8a90ec1e78f75fd57652ea2b9a286457487ce69dd334307b72cd0f3ded69f261f27f6719b611804bf888a1ae1c674475a3c97acb97cb7b6efacfa08e31ca50802e65a4c0150058e319f2f05c71353997cdb28a4f33d9c0d1fcfe34aeb214d1dee61b60d0974f902fe64ffc531acd0f35b23c694ad40c5575628e218938f06055e3b984d84e030baf2731513fc70948206f7117a5b9331e835db8b03da2a75c03b5fefb5e08292d5f9e46e6b790a5dc88e4846371196dc5922504890880c33c522c4c3fef881cd6665b8db8771f3e1a5d890a4666eccf1c4a39a4802bd8e0d0bdad47c602bcf814c58aa9b84e6f195c06139d84be59d0c8b920dd363e622d84626fc7fc7da29a3957350166024103df7ead06794d20486f246ca534c33f6a5200d34d4fd79f94ab3416c6000e1aa3f516f31539ef469038afed4fc5f9acaa3a4a6e20b71e84ae73b2470f214e73f3fedc00cbd33f4b7041a70c5fc9d4cf40583db0097e183e9c88893ca370589cc8e7119bf8180e88f073891cc7caf37e8fcb741e7922b1c3327b8b9b975009064e08fc391122e9558680ccbe3207551aacfbf9e784d4e7585943a8741d3b588b03ce2ad4589e0f51145a6ae5a763d550ad1155d38b5faaae8d57db3b2681a4dc4f2909e51394830009c1fa7e417e9b6366da3b1f14729ebfff0386a95dffa7eff09d02521295e4b70c17af3d0af67a3da6ca2992a4aa3a889255b5192a499217c90e777da2901bd35e46a0e26b9703c64cd2da03cd816c0faa4107620226ac683aa6321b1b424be80ac73dd5abe90f5294713e61e97b0b948d94d95fa76dee9bc565ecae8611a486cc07d6e93ace86b93ddf886cece94b37ab45b7faf68a63fd3498a1ba97a6524c6f17fb564be15ec28f29d9900212cf1f093c6c12be75e65ac2056e3d9845ba7d3fa1765b3c2681d456cf3661ded237e9ad6a9abfae8f798b5343c8ac72d408c1192a3fa7a8ccee6d5de1b4463429355fe24440b9e1fa7da25fe3c3923cd634b60302b9695dafba953da50dc36aebe2870bb9e82cd08045a5ac874aac37b92cd2de82603e599ba24f4bf353004d709d0de46bb5f524c186201a2fafaef516c3a84d257bb9a233c955531c3ac3bd921938aac5a12d9be2b741e1aa5be449346d3b2cf57babe22dfe8c38f85479e21eff44fdcf51e78dfa5929ae9a85dce6a8d5db5c47b5b796e6d01b2027d5b4aa04b43fc0243cd74f3c108998bb8d8ee53a0994a7d0b25c2ebacacd50346bef096f45e7f7a32dc1565afc01b8a51deec9f2595f57b829bbd7b72191950d738ff5b7c969f0f1e8867c8b9a74d232cf01351e1ea82b5576f988835fb9e491f4d12a8a12a449a266e3180169b6546e7dad5e43b226d26b600784d5780d6ed4013db4ee9a67328f9e51ba67b5089d39de1fe554406908d7771b33269bf2a1a56fcf811e12851586f67e7ab227a51d75c7ac9e5dc2b2674e505c59"}, 0x1004) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0xd2, 0xc8}}}, 0x5) 00:03:26 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @mcast1={0x0}, @private1, [@hopopts={0x11}], "fafb17c1b3979f20"}}}}}}}, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) 00:03:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:26 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000280), 0xfff7, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65312c6c6f8f65726469723d002f66696c65302c750900003d6f6e"]) openat(r0, &(0x7f0000000000)='./bus\x00', 0x2000, 0x80) [ 206.598922][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.601151][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 206.603179][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.605299][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 206.615155][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:26 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x0, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:26 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "4035cacfd46d2b9046d14c8b1ec529600c762c6773c1d6cc481d9acb1aa14d2b0da7538ba2ede7f83059eadea80f8f2e87b11cc72c2aa937b0934db6a07c3a677b39104ee26fe9579f653d49d13bcf9748b9bbdb06c8c6826c54c90cdd652803203f410b1df43817ec8d3d983ace6f6155bef3f4dee630c62879e23d4838c9da79e20857c3bc71ab93884e9c09b8f01cd8a855443ebe7d4241db2d8bb563c002909b55d5d798fa1da023160afd6cb6b8d05d6a3e6b19a331c9cb18ee268af3c427c2a766792bcd83f01bcfeac6ceb9ca252de2f19a10dc5de02f7c14ece32b28bd286f929cad91232a772ccceac83dfafb8ecb1d1fb9f514dad04b8e89fa3864d1fc5c8d3ef847d153d50ec6a0e18b9ee8abc7dd236842ee14ea69608e73d82bf01af8fcbc7ae81c1389288d79c9b6da6323cb7d760088e700597dd34bdee4b670504ab04f99721180ea01fc5efc07020e8964c32a6e4fcf68e392a2e89163e1da31f2e2912a8e1d79bc9ecbc9d3dff5a0664063be8f0deda9b456e8b4fccff605e83d26c9da5f038d78dd9933b86ee92da5ce560f3330ca11042700bad4005a019bbc1657eafa5c99c26bb211058f9f206cfe09ed25373574e413df26c4a61088d6571f506bf3c49fe285c6add678b9a3c4b76da80692b749cbeeffbc85d7244862e148ee5be47408b76d5ae80954eab3accd825ffc07c64fb22b651699911e888926031b22a145b63504c9aa734147acba0f4d2d91ed27e8d6857ce90c7d25cc4c3d544a4e39a1ad5f2480f0b967914220e1228e9988543b67cb959b65c41935d8423cf160e320609b0026d416ccf5865d92ff74b3c12bd7f91026ddbbe84737d859393156fe96a1b56fb16811f16f58079866a467f6d63b1487b86d17feed9df4f2e350a5873d469493fef8442b57a822af6a5173111096da2f7d156d20e9223df3b0c6f98ad0304e4ef83b896b4913bd76c3de1e6c66b162ce49173909afde62781cfe263c23c2b17d4eae9626fccf7bcb350580311c3d8220cdff76b0f19cac1c7b2a1ab1263f9868f8b7ada2afcd9da71f076c9d264f364223bea80ce5850981a41a5a1aa8e965bd29d2cd51627bf2c7911cbe536b11cf232b549d38690a54218878fa14dd43b8c14b4aa2d6a352ae3dd76427ac19d12a7411631be224bab1b37dcf20bdb2cb6733b65dd860bfa801f561f6e775bdf1ab298a200c7a9ef1e2ebd0f8bc841401e6bfb108685ad1f3feb67da2734512800b16fd24413de28a500355e18d840a6064a2008123f16111697169e3d98d8896c367dedcddfb9ca7f2d2ff03c38592fa98d78d7a1d702e7387011e1f15c9f3b4c2f0378a9f6b457a069f08ed6c3be5224f2e981cf72fa9161fc536ab0b13e5d8199a324a7d8d2ce40da2950f6584bf951b1b53856d60dd976b032cae5ae5c22a679922cdb808a44b89b4fe0a01c836e8bae854284e472d5184126fc9528f8e8cfd45e4ed78ddda39d31118fc1082f34d9695d001cc57db2ec1c1ca8e0bb15ea932b77ed121c71e0534f72c32499bb5d03e855d1bb80696d18733127ad7e60c65f7cd4950eff6e849ce041083982d2cf2f575d4fd62542758002f1862e5e46dea8662a8bd868e271e305300ccdb15f372a58b06b78bd37f036b7292ef69e1c0712cf93d66453d273a53a563cac6f9ed2397e93bf5a9d281f93af247b2c4ef5c8b0bbeb5496364a707cdc032751eab6aa9247358497c0ec34d136d4470e44376faa9079baf1be4cd9d090216dc3248597a6b18927676d5354e9477f30821751b99c49931c1a657821b8b1cc925392b15107960d5ac38011c61c24c921c77677a99b704ff8e32fe268fcaa01195057652400a4bf37a1475ad55040816992e2cc0756e639547b2bef4884b3debe43f31f1f6112a6e2b74d194bcad53fe98cf6febeb13614406279d8b9f522b4e6d9480cf7222209f16a25272da106021cfd7033efb1621c97136cc5e7b7a88a81377c22725acd2ac4b9329e1d65b07b82879f4e71de7b6ee2299b08d31b6e842b2ad1bad27a4e25715c605e5282fb49b4b4083ea994d210a476f47c364e40aea0337d8f1424bbcc71ea33558a6bd4a63a6ba312c75c0219899875e981450694ed1f5eea3db9caa89bfa07df5360f73e5ef69bbdf1de14af56f72127c2821937ab78db370b37152134e31d5ca0a1da93cdeee2de0d801b0ea74187e7c2201ca3aff585c8acac85020f6bedb144655004c1ca9eb4e6bda3c9671084059baf79a187c1dedc1dc90c1e902a78f555f8b77ec46ca025c598f34f72734181d1e70ab5eff610658a6d4688a924d54ef10b1c2f4a1fd230dccb8070e18f47c8b45eb295d3152ca50d491e72296c911fa203d4417b3c4d56c59dc2aa4ce13b22f15cd883a02c42ec525a344d1a6282f811465c9621a99b980a5f4ee33460baf4eb42d403734786c76e00e211f6c9c97a0c494fd6dcfe7a4c377a5f37a4dacca5389fabe163fbcada3d101c6d9246d06620387e258b7b3b55fcfd4d911cefdc7b748dc723dabe956de77071c3f9e41f40cb61a68453fa7ea3e7b72269b77b3d9dc97cb501f5a8a59d7044c59fa6682dbcb908f453a1e42cf5634d164003cdb8b791e496bdc7e650265b9846cb30c463d8eed32eba239f239878575c2838f5a2aabe07c549c2572df12d5b965e03028507adf6b02c8d567dba010aad4f7bd9074e4b9b0c357fa174f631718ab82228ea2d1904e02c28b5d133fbe38262ed455bd9a455d282957e5b6cc7d844b56189fa86edc69cb210972af1ad987e74af844b4ced43fb437f79a692ca3c59405d5997e895e144f0f0e37b6678c01d8935538fa121a4d3d10e4920fca7049513f0d778ea0af91b2e78f34a3cb8b87f0e972d4fa3819ecca9505d361dd04b22beed7d3e2f0e7fd78bd7d2fd4f02b981164afe60558f0c1056c7d18982d893839453eac0c809ae12ef7d98bb6cf9725e4f381c51bf01cf9de17300ce5aaf3de5a23a1b9d1c288912f5b463a4520460379dc251ec366af81ada230ed62ecf8d88811b5642435c88ab8338b5252b81386a4d9f8aea5737ca9a5022132f1a66860cbcab598a5bb39b9fce000e665bb3e53ae1d8a62e75cc92a677ee0781fefd0802229d664aa1c25bc496ff359410f5cb17b728b31bdc6df88c7ca8210ca56ee421279984d33c480963455341aa735e4abd4adfa5125c47588718062d9878bf874246f5c67331a4f5f65f0d5baff69a69aee1f53c0a6a46d37cbb4abbef9c96ecf589711a1550e9de24fe42fbf5406d1f3e572fa8621971e2735ac36eaa6b4fe4db77e014686caedee2fd45422db0fd27db286f109ff957a59f86db3872f87d05efe086088281f78ff5295cae56cb57fccf0292069711a9efacedb449c18bc276343181d192a7a8118c7ec4a1b2bde5e1f7300c48f41bb0019a913bde42a56046d800a5cd47a3503c2e4c344f1882577cc6107a64112c304a4967b46034b1f3fab07ba63c8f1d58fb4cda17119ffa5649203b28301108b997a596fe1d36b16c9c192ac9bdbab9c31e2519c315eb1db00c239cf0a0d31ed7543ed2f6d837dbe4d902df63b9c23b512774afcde751846c31ea2f9c4190178787889bcd58c867cedf2f106bffb2f820d3958d5275bd8d350551a51dbc5702a4e5219467f98ecf8cc66f9ba0b781080ab6d3743e3ed5133b6d7e00cb6fb59a0172afe146763ec4c5924bdc0fd80aaae262d4188a25753ba0fc14771dd5ac0410c429457692bc27167abbac8fc0359581716b84c0a188c445538c8f2fe22721b3c86844404e248b5169764b2acd10fdc9d2f10839e73b4c17ce96102d078c5962ee1d914d02a9b7c04d2f002c177039a5433ffdcb58b249223b9872dd9272ea1563c57fe8ed305f87deda3b916a736d91551ade4c2348b7f9d6d9b8b5a404f2846d6e472ce2304193ccc8def68afc86aa77123ee15d23fbc12fcadb75923f9ece07af62b75fe65e8c7e548795e6f362635c1e87c15179ce32e68647c377cc10e0bd503dbe5f1b1c71563cfb39f0f89f0c083a74d6027ced0a3a014f30c303c85081dee991d6b784aa7db473c74e916a8007c1ad4ce66cc92e647441080a42418e6f1e2ec479b20c18a6858581333695e235b27c417bd3294644d1db44f1e9a787f4cc2ef36b1cd8b910cb6c93984ed5f0a6b5bd866e0f21b32c81e56bbac668a36969cc30acefb851f7af2c18af8973d968077a4fa3cdf1b48f4fc116b3291a195220e4379ce484bf666d2a54604a1b0ba1d28a219bab16418f0ed6848586337f2be646bc9ec8a90ec1e78f75fd57652ea2b9a286457487ce69dd334307b72cd0f3ded69f261f27f6719b611804bf888a1ae1c674475a3c97acb97cb7b6efacfa08e31ca50802e65a4c0150058e319f2f05c71353997cdb28a4f33d9c0d1fcfe34aeb214d1dee61b60d0974f902fe64ffc531acd0f35b23c694ad40c5575628e218938f06055e3b984d84e030baf2731513fc70948206f7117a5b9331e835db8b03da2a75c03b5fefb5e08292d5f9e46e6b790a5dc88e4846371196dc5922504890880c33c522c4c3fef881cd6665b8db8771f3e1a5d890a4666eccf1c4a39a4802bd8e0d0bdad47c602bcf814c58aa9b84e6f195c06139d84be59d0c8b920dd363e622d84626fc7fc7da29a3957350166024103df7ead06794d20486f246ca534c33f6a5200d34d4fd79f94ab3416c6000e1aa3f516f31539ef469038afed4fc5f9acaa3a4a6e20b71e84ae73b2470f214e73f3fedc00cbd33f4b7041a70c5fc9d4cf40583db0097e183e9c88893ca370589cc8e7119bf8180e88f073891cc7caf37e8fcb741e7922b1c3327b8b9b975009064e08fc391122e9558680ccbe3207551aacfbf9e784d4e7585943a8741d3b588b03ce2ad4589e0f51145a6ae5a763d550ad1155d38b5faaae8d57db3b2681a4dc4f2909e51394830009c1fa7e417e9b6366da3b1f14729ebfff0386a95dffa7eff09d02521295e4b70c17af3d0af67a3da6ca2992a4aa3a889255b5192a499217c90e777da2901bd35e46a0e26b9703c64cd2da03cd816c0faa4107620226ac683aa6321b1b424be80ac73dd5abe90f5294713e61e97b0b948d94d95fa76dee9bc565ecae8611a486cc07d6e93ace86b93ddf886cece94b37ab45b7faf68a63fd3498a1ba97a6524c6f17fb564be15ec28f29d9900212cf1f093c6c12be75e65ac2056e3d9845ba7d3fa1765b3c2681d456cf3661ded237e9ad6a9abfae8f798b5343c8ac72d408c1192a3fa7a8ccee6d5de1b4463429355fe24440b9e1fa7da25fe3c3923cd634b60302b9695dafba953da50dc36aebe2870bb9e82cd08045a5ac874aac37b92cd2de82603e599ba24f4bf353004d709d0de46bb5f524c186201a2fafaef516c3a84d257bb9a233c955531c3ac3bd921938aac5a12d9be2b741e1aa5be449346d3b2cf57babe22dfe8c38f85479e21eff44fdcf51e78dfa5929ae9a85dce6a8d5db5c47b5b796e6d01b2027d5b4aa04b43fc0243cd74f3c108998bb8d8ee53a0994a7d0b25c2ebacacd50346bef096f45e7f7a32dc1565afc01b8a51deec9f2595f57b829bbd7b72191950d738ff5b7c969f0f1e8867c8b9a74d232cf01351e1ea82b5576f988835fb9e491f4d12a8a12a449a266e3180169b6546e7dad5e43b226d26b600784d5780d6ed4013db4ee9a67328f9e51ba67b5089d39de1fe554406908d7771b33269bf2a1a56fcf811e12851586f67e7ab227a51d75c7ac9e5dc2b2674e505c59"}, 0x1004) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0xd2, 0xc8}}}, 0x5) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0xd2, 0xc8}}}, 0x5) (async) 00:03:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 206.688815][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.691514][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 206.693961][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.697414][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 206.714342][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:26 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x0, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 206.722648][ T7654] overlay: Unknown parameter 'loerdir' 00:03:26 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{}, {@none, "993e96", 0x2}}}, 0x2a) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) syz_emit_vhci(0x0, 0x0) 00:03:26 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') (async, rerun: 32) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 64) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000280), 0xfff7, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65312c6c6f8f65726469723d002f66696c65302c750900003d6f6e"]) (async, rerun: 64) openat(r0, &(0x7f0000000000)='./bus\x00', 0x2000, 0x80) (rerun: 64) 00:03:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 206.798184][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.800925][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 206.803739][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 206.807746][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:27 executing program 1: socket$inet6(0xa, 0x6, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) accept(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) 00:03:27 executing program 5: syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x1180085, &(0x7f0000000000)={[{@nobarrier}, {@noenospc_debug}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x7}}, {@skip_balance}, {@noenospc_debug}, {@noautodefrag}]}, 0xfe, 0x51cb, &(0x7f000000a400)="$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") 00:03:27 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{}, {@none, "993e96", 0x2}}}, 0x2a) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) 00:03:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000280), 0xfff7, 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65312c6c6f8f65726469723d002f66696c65302c750900003d6f6e"]) openat(r0, &(0x7f0000000000)='./bus\x00', 0x2000, 0x80) 00:03:27 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0x0, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 206.825823][ T6050] Bluetooth: hci2: unexpected event 0x04 length: 39 > 10 [ 207.473312][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 207.476994][ T5586] Bluetooth: hci2: unexpected event 0x04 length: 39 > 10 [ 207.478939][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 207.484895][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 207.489916][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:27 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{}, {@none, "993e96", 0x2}}}, 0x2a) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) (async) syz_emit_vhci(0x0, 0x0) 00:03:27 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0x0, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 207.509977][ T7688] overlay: Unknown parameter 'loerdir' 00:03:27 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0x443}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x15, 0xc8, 0x2d, 0xe9, "adb1ef366952e1a3"}}}, 0x10) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x3, 0xc8, 0x0, 0xff, 0xc02}}}, 0xb) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "67c8012983b9d2ef9ff1f8754dd967e27d3b98d6acd3ba7711a2321d6428522fa38722404ac97e8daccb0312ca7d51b5645b620a5efe82d7278da28a2794e407b85708907d8d77a9515b14e281675afdc8fc31a63199551f001c06d3048f5b2bf8d2edaf40b0e32fa9e9aeb6f9e2730ecb3666fe55d8febbad9f295f658cde93e2e985f7f514fd9a9f3f7e274eb9d0c7be7555fcbd63ce25e9074f0cc2787b9efd1cc9721a8cba748bfa56d69efcc548866c07514cd85bcaf02e676612b00d3fa7d5d0da11c569434a9c1fa90a6695802b3b7c6bb62e29cd163845a1b31f73f30480193f87fa8e1057b08d07cfe40a461831b62daba98a57f20b4d2506fe7b869bab05c07ba4d17554fd063affe47d9814364a203b09ce59e61e6caa9cf2f6ddaa29d9f5985e3b09c76efb2b2f985ac131df94c3049bc9a8ef4d074b22e3fdaeb7b3b3a39c81f7271b0a39d9d145b100d128afef84eacc2a482b069efe709295472e0bf77c3cf4022d5cf90f0b0483345822590ee0a8e1f58f89ead7b4920c0bb3437b2cd6675e5fc2550e7b62c2e851523df9d741a9eaadcc54c25949532d521745a6aa540d11039ec3b2b5b853eb72a504879ef80281ec8c5c231c2986f34703810da18fe24822a5138369acea0567de63c15030dbb34b93b7200b299eb81bccb8b3f94138ea6fc6c8febc64acffa1f2844047a2435ccd8e762df7370af7e758b2b4249885b13242ce83896113d64f21589d23fe6978730d7aa8b3ecee1be7eaf6d9d30066b923878668d4c92079c998a7ffadb13c55e312fac5d2c8a1af4ec370f0d71accf0823bad9efd286fa189ce23edee6b3a5ed9f9306f2bb5c3eb18c8d25132a857d96c1c41a05477665310d0e005b7cb37b305a55f795d375d3326bb7b62a4d85f368ec1939cb55505487166154dda2b593f86ed65e0360f46c9a1a95bcd7764b9533c08e13644c1a451f64f49ecd743aa2d1220a597b744147fe44593b3c74edc312ad63b131cfe9d94be7d6a7f62798e9df6c1cf73e8f68a7ee751635ab6652d76538b12de6fc5fa66769022b4705c105dd47615d5c034e04afdbebbf65bd45db7e8c7e54cccf4fc537d545f0400fdf350a261a935953a6e527d24f232aee967adc2102d24b319816f4622676190022a34d05bcd271cf43d137e49b2e787a7404dac949f0295b7d2e8c880799d9c80a424e38e89d3a5fba4f63d34d3e368933cb0b3d7ff6b6e10335c004e13f38d3b77b0bf8a88ec3c466e44fe3aaad59e1607417b73a18ba9f6911f6506503f6640a10725dbc8debf9952b3ff241ab9ea5b22815b90263eb27cc1469bc9584a526131e49c670e8035b4533a99245a41681437ac5a6e1ab4a2bbc749d8079fa2947030d1c1b4c112c8af0ba84802f99756cad8ee604cd04ad5abdedbd1254b3a9c6050da43a74d6b28c3f34c7ebc37cd087d6e14fb9828cb8e132053f0014659ef5e554a4445ea027652e74356fe610094e34516f5b6e512e1803fd631e1e642638a9db3417a30394e51d29c3cffd560a3c8ed99fb9959898bc8f4df06028af98aca040edb22c197399faeba417b359e362232d766b1111334b8d2f31895d2f7e1d20cb0bd2d7fb2575d2b1a47f628e7f3f4f59a3745f35db65dc038dca5395887db6beb54753974534ba6e0e3d6f7275933302443d379c5072f3adb812211092425bafc7a8c0052f47567d90f6d1a8bf3a93a9e00de0763f79c08630b792a120da0c73d52bae878eb00efee045369437af3a6be9254507668cef77c0f5e50d3c2af0a5edbc52d065a1b7480852cf3c29f56b48ce324de912dcd14e99cc7a80f10b3aa8034a12fdf0fa292059984b50ea8cb8f80207f59070013e7a6c1c17ec47a23813cd8c429ce096bff2727943c9ca89000f03e5358a0fe48b8492d5fb346bcb425c20f106e1abd6c13f19ec2f8e6cee782edd5c16f8d8b36f32c0ea07f359b2a72d4390fe6a74da30b4f180ac881e1497fcfc1ea5233ccd8cd723cae58b8e91d28c5f6046c1052f3703e828f8cc100c828187ff477ce2b26346e615d7493a8fe5713b2cca71fc1ab25771055067a9c61d56dd37af76e6227d268282261a7c76a59fa2989ca44aa66e0069db54ec82814e143b1f346926e7d1f54f55492d0831cfbcc9a5b33100fba82f7a029173a2fe53066ef0203df831b621049de774523d03a51f4f2a413468007ad0ef6081123485f05ef4f55d19bd7eb6a0c3826497ed99d5134e19221b60cbc2fa8ba58d58f5311e189a90ffe79e747d14c72cfd9fdf86b43988cbf8063f1953606642cbcc42bc8215a38dbfc2ddec003f3e41be8442332c632c0c3e5e0727a492b70a11319e140688b1e22c7288d793c31fe4d2b0b7efcc149f123a0859f750971120efc81d7b7245e508ef8d946d377410c89168c04d6043a408bb16ed9e075e996fcaab6dad5bec4c4dfdcd7939f3d0de34de84da912939b532d4ecc8e41195e5009549bbc0591401ce780a16a9fbdabd70dd6a394ff36b8ea689add155e022aec7cec04b3403e9f14203b3f4a96041ab2333c5fe9e2abf2ef54f755eaf5717e63696aee5e6f3b2ffc559cb04fe41226380816b2eb85b2c0d7c740d28ac6f0be757ba03d249830a68558faefae88cc8ef88d1b8599b2eda6b6af6a1aee68cdfd40356e2fb1854e68761dec4d77db31fdaf743c6f6eabfdc28a17eb9fbfe35987a9f2c4b4d4a353468bc7c4f9c7183b0ba9341c369a1e192db4ec2b3327b4a1d06d9bf5bc0c6e3b14a19222e83de8a3692558cbb0a699c634cc6a4c65ec3871393af257fe0ef1abc5aace17e76105ef1669cc98d429af0fceaa6b2d7fe2e3b748d5652e31cd78d37eed87fa2799007ec7b709f372c481fc96ad2d397412a9214d38980d9ecbac7e2a30b893c01283bf609e8024ea5bc6f30b4733e2e765c1a759202dd09d3557b626e95eb71f27531d94df0b30d5485898c4f940ff03905582c87500302a942e37a6066936bef1dfbb455146ffbd38f0328bda9568b471a528f5a533bd01b6ffa1efa99533867dfeb1ab7585583f69027a410c8a646d5525e92706c09785cf749b4c175cb3c38b2aef91aef2709e5125d835d8ad7ed0b6f6c1f5647fc370487ba7c23db365137af801149f4698ee284f07c7d322f5147d73ee0895e21cf678c8f4fe10c9982a25f02c555522377a30d5246b888fae8a61ab305fb87de57915923a2df17293baf81f14b6950070ac2e8ec1c5a28e0c999da37290d6b38aca29e8e04d24a506804789eb2dd64e241274d0e7bfb6e1266ca1876d555c4936ffc01a8bb7eb230a7586a3ce8aa7087a79afc9f20a54382b456141b26e9e34a7eddbd998b5ac79e26aa24e0159d54ca4c529cae7210ea0474b1cf40aa7c23d4ab2fd769046ab15d5b24b75bfdb29e192a6e361f29144a1eb1d7bef7c1514e074b6aea4317696a93ab351674b212f1c73830b82347214582e3e8a7be8650d4f2f953681cb5d8dd29d2c588284b98380045d2235215d72a8ce537b48f641490e764a7477b87de4bf706cefae719d7cd2528ba2758b7e16fc68580d7e78d5471ad70b1e831bb0334d8975a39cb6da94d4b37f982ebfee191da5bb6e9af081518bbd7d1b69a26357c4764a82410c97e9a1633164f01dadb8700bf3b9b8c325202e4d33042095918dcdc98772919dd722f41d5fafd0e8362218a2ed583eeba4f0d53a47f18347e0914f60c445df09697791a66c6fd87046e2e6eef514c39b3af2e3ea7071a8f417d9a16159cfdb54a827e728a679f182d77a8efc3a74f2cfdf08f97fc8fe9a88dbeffbc1137199835b2045b5bc0f46692bb795accb08d32fc121604707b242283bdc4a171f1d46c039ab0c0c6785690ca5f3f6870fd181782aed4081ba5cc324cbf3a52e4b522df36cc6a24de04ceeb8c407482cc592d8d6785e145722003dc1a3dac9c0f382fd1026c8b8b82831f6b9f45db11d406c64921b5a5745fcfa3ff1fda27f3120b470ae90c8e979e5cd223075854cd8f4be7149a17a0697dcf958ef2e76509b30e3e50e184858a97d08288c1e213b572a32a3f05554076e33f1e9fdd9a8b6d29b0c6df480a4608268d5b248e96e9ee9fd68b870df1d025cd0544f2594ebe867357efff1728817f55e405867aaf9ff0e03e13d31b1f15ee6e9c004a86dfa850383dd427d77e883722f91f1a4dd141b4122542307228fc8329196a8fc16a499004e190a2d050dc62570d2996336db2496331427ed8277f5bf0ade16b0b8bbc9a8d385915ca10c80e7651c4e55696cdfc3aa3ace42084c3b59fc857e644e6d42fb7e2dddf90695d19862a434b0d6fc09084a6f6b621d75f84defaafd5447c7fbde76c2f11e169b5eb567311b9d63a570d3ad68abb1f79e3f33ee5c85a01435f6b9c7a22f0ec673cc923a5285d7052bdfa8a9ae5bbb56321f63c80124d8bf6baab1fbc7e97e842a08860662b1d817f64e724135fdef460c61de9ed178159faee5e86b3e754f59808033c0c172fddd05f7dc20ee422412a0d64af97ed5eaf478c28781947e1553a50fbe95b9a83bcb859d735cc2c8e66d4c23ca63b2d9d1362c74e087015e8c7eb33634a16906eedefc928f1412b54420e9f7369719c7b13cd83d7e660f69d01569a09c38fb60ed2a46b8031cc55571659a8c48e5ffa42a45652df23443be2a634d01f76843eea91be41a0d04525d9f1b67dcd94aa4cc708c211328259030a50e298260d358b7a3483d4e0aaff73b1c0b571c19112b56e69108d4bb25da5c17789aeb1f80dc144aa85d62bb4b9f79a86ddacbee92771328b2cfebd32ba6be82830eea4794bfbb19367188eb1d5f5a04d8dc6f04804553af7a97276f26b1e48db7308646abc101ed9bec86d9a6dc8817ca60185d2d19b0a0742ea127bf06fc5a6c6a4a5353220af30b30d0ecb92484d4695b1342b07fb781e381583880c9b7498bcecf8ba016fbc340d41572483f723da9800f0788f18e9bdac763c80e130427cd37de5676f08072aa3ce6405fa4411ac27450895c3da3cee8b04a3be15f43cc59e80dbbdad7a4813f60a65047574ae0ba2b80928e113f054eb5e469270f8063ade18c4dabe307034bb0b7473d4d7eb31c04e88c3ee908705e11e6228f4054dc288b3e82366080bf5370cc7ef6f41c6463b3f3e8a4ff4062b7ea59e0e929997f3d3e732d93c727ea24bbd735429709dcf87b5cd9f2911302e0314ffead0f7e709f3791d6359ce3b654ea6ad5d7d163dc2bf66474a33062162391a64e7cd6eb4e8a96f252afb2f0b5cb53d64ad61bc1528c8bce125578fbca5fb6e2cbb4a2a309fe71e119a46157ce7832f39a6e7db8fd55edac6d5c182c9a7125bc80b1bd8fcbbe2ab4cfc8fbee6ca0d1a384b6503716c8a481d8d54cda75ea6cc368d4deb995bfd132e64304786e538523a6fea946b1197cb3716eb4a8daaeb3402e52a5e4c994f15f22fc94001d01e144f87bdc54a04ca4182466729444dc882e1e57a61d941cbca021879fd733b7161503e7e4b1ba77b5d42482db8bc525816300c2b41f7fb265ab5c2b93a85c47d2f85d3246c9b4e61a18bdd16037b40b38e4fdc6723c17057adb2f32a9345c3f2f3cfef6e82b8ac7bc51a3018c8374bf28a690af34e8db761716e550b77a0a73854df2eef57e5829568585cac3dba385b62702f1959d456077d362d11091323be8a1002b0ea77be56e76625ff810d266a0a11a4b520a702ddb34582f5e06c887f8fe635d39d4592cd687e1e9789b629a42f9638bb2aaa48112f7d5fbe040e5a6ba597d8d58b222f0"}, 0x1004) 00:03:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:27 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0x443}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x15, 0xc8, 0x2d, 0xe9, "adb1ef366952e1a3"}}}, 0x10) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x3, 0xc8, 0x0, 0xff, 0xc02}}}, 0xb) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0x443}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x15, 0xc8, 0x2d, 0xe9, "adb1ef366952e1a3"}}}, 0x10) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0xffffffffffffffff, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x3, 0xc8, 0x0, 0xff, 0xc02}}}, 0xb) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) (async) 00:03:27 executing program 2: syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200810, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/691, @ANYRESOCT], 0x4, 0x508, &(0x7f0000001a00)="$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") setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) setresuid(0x0, 0xee01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x3, 0x2, 0x1) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) shutdown(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c9842, 0x0) [ 207.516079][ T6050] Bluetooth: hci2: unexpected event 0x04 length: 39 > 10 [ 207.590397][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 207.596124][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 207.603824][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 207.606264][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 207.649167][ T7703] loop2: detected capacity change from 0 to 512 [ 207.687389][ T7703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.729112][ T6057] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.851651][ T7687] loop5: detected capacity change from 0 to 32768 00:03:28 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) accept(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) 00:03:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:28 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0x0, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:28 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0x443}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x15, 0xc8, 0x2d, 0xe9, "adb1ef366952e1a3"}}}, 0x10) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0xffffffffffffffff, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x3, 0xc8, 0x0, 0xff, 0xc02}}}, 0xb) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) 00:03:28 executing program 2: syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200810, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/691, @ANYRESOCT], 0x4, 0x508, &(0x7f0000001a00)="$eJzs3c9vG1kdAPCvnV9uNrvJLnsABGxZFgqq6iTubrTqAZYTQmglxB5B6obEjaLYcRQ7SxN6yP4PlajUExz5Azj3xJ0LghsHyqESPyJQU4nDoBmP0zSx05CkcRt/PtJo5r3x+Pue3Xmv+UaZF8DAuhwR2xExGhGfRsRkXl/It/iovaWve7xzZ2F3585CIZLkk38WsvNpXey7JvVa/p6liPjJDyJ+Xjgct7m5tTJfq1XX8/J0q7423dzcurZcn1+qLlVXK5W52bmZD69/UDmzvr5TH82PvvrwD9vf+WXarIm8ptOP4plFa2t3fWQvTmo4In50xnH6ZSjvz2i/G8KJpP/e34qId7P7fzKGsm8TALjIkmQyksn9ZQDgoitmObBCsZznAiaiWCyX2zm8t2O8WGs0W1dvNTZWF9u5sqkYKd5arlVn8lzhVIwU0vJsdvy0XDlQvh4Rb0bE3bFLWbm80Kgt9vM/PgAwwF47MP//Z6w9/wMAF1zppBcu3z/bhgAA5+bE8z8A8Moy/wPA4DH/A8DgMf8DwOAx/wPA4DH/A8BA+fHHH6dbsrvTflL14mebGyuNz64tVpsr5frGQnmhsb5WXmo0lrJn9tSf9361RmNt9v3YuD313bVma7q5uXWz3thYbd3Mnut9szpyHp0CAI705jsP/pzO/Ns3LsX2o8dZXWcth725Onn2mvx80mVZD+AVctbr3QCvjqF+NwDoG6t9weA6RT5eKh8uiOfl8koRcelgZZIkyYtrEvCCXfnSvvz/jfYdfij/D1xI8v8wuOT/YXDJ/8PgSpLCcdf8j+O+EAB4ucnxAz1+//9Wvv9t/oiQny0efMW9F9kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeLl11v8t52uBT0SxWC5HvB4RUzFSuLVcq85ExBsR8aexkbG0PNvnNgMAp1V8VMjX/7oy+d7EwbOjhSdj2T4ifnH/k1/dnm+11v+Y1v9rr751L6+v9KP9AMDzdObp2/PPrvj5eOfOQmc7z/b8/fsRUWrH390Zjd29+MMxnO1LMRIR4/8u5OW2wr7cxWlsfx4RX+zW/0JMZDmQ9sqnB+OnsV8/1/jFZ+IXs3PtffpZfOEM2gKD5kE6/nzU7f4rxuVs3/3+L2Uj1Onl41/6Vgu72Rj4NH5n/BvqMf5dPm6M93//w57nPo/48nBEJ/buvvFnOPvprpTF6hb/vWPG/8tXvvZur3PJryOuRPf4+2NNt+pr083NrWvL9fml6lJ1tVKZm52b+fD6B5XpLEc93clUH/aPG1ffOKr/43H3r93it7/53v3/5jH7/5v/fvrTrx8R/9vf6Nb/Yrx9RPx0TvzWMePPj/+u1OtcGn+xx+c/fET8tO7qMeM//NvWoWXDAYD+aW5urczXatV1Bw4cnObge+cVazT+r6uS5ESxeo0YZ5F1A14Gezd9RDzpd2MAAAAAAAAAAAAAAICuzuMvlvrdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6u/wUAAP//pMrZVg==") setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) setresuid(0x0, 0xee01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x3, 0x2, 0x1) (async) socket(0x3, 0x2, 0x1) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c9842, 0x0) 00:03:28 executing program 5: syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x1180085, &(0x7f0000000000)={[{@nobarrier}, {@noenospc_debug}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x7}}, {@skip_balance}, {@noenospc_debug}, {@noautodefrag}]}, 0xfe, 0x51cb, &(0x7f000000a400)="$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") [ 208.335959][ T7715] loop2: detected capacity change from 0 to 512 [ 208.339888][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 208.342570][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 208.351025][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 208.361927][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:28 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c80079ebaf2f3566924fd78991742a592e467b3948885ff01e293794d92e06b6708ccf7e4d0537304f244d4df6ab9f9c88fccce9cbd8d336860d203062b194d1ecb944bdc9ff8ee4462d2028b249bf2c56656cb404e80e6c44d746fc90a1b8fe73c0e302f6d0ac89ea60a34496cbc65903d1daee5dcfab452b9d6c7b"], 0x7d) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x6, 0xc9, 0xc9, 0x96}}}, 0x8) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESHEX], 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xdd}, "070c7bb865a3f6012f2f6616b705be89bcb078f16cc927fd8d494d428c1fc883599df93500e7f1451f1b0f4c375b31a93691b315dd3cbce574374e398ff0e7a86fdc0f0a470d79d6b1532300c9a6db714f8c716e8c975a9a0e5fbf63b6338f60ba4c0015a9ea41af60ff7274cb0e17379dd6ba278809e9997b46dba177743666e71c019f756ac218851867030b7bf55dba708c1013e3e857d032f0417f61764d86c26eb430ca40b8dc3a8809f518314ec39b1c127b356478d5821f4083d66b75cdf5f7e9e24d75ceccaa8324e8179a13eb20e42e728e1f9e0bf91b04e6"}, 0xe1) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x61ed, 0x5, 0x6, 0x3f, [0x931, 0x8000]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0xfc}}}, 0x4) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5c}, "8f2e0bcf4445eb76a471f52c5a6633a12a1dbb2c3996347904eeaf10f4b1e7859e528c3c90d056d47785e8200a3b7fdeae5b21f9404be7a88e08748e60a72069bd23e38c4dc1f1108439d01dc4f02dfb4bc4d28ee11264daaaeeb647"}, 0x60) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0x0, 0x4}, "1b463782"}, 0x8) 00:03:28 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x0, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 208.412545][ T7715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.416975][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 208.428383][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 0 00:03:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:28 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c80079ebaf2f3566924fd78991742a592e467b3948885ff01e293794d92e06b6708ccf7e4d0537304f244d4df6ab9f9c88fccce9cbd8d336860d203062b194d1ecb944bdc9ff8ee4462d2028b249bf2c56656cb404e80e6c44d746fc90a1b8fe73c0e302f6d0ac89ea60a34496cbc65903d1daee5dcfab452b9d6c7b"], 0x7d) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x6, 0xc9, 0xc9, 0x96}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESHEX], 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xdd}, "070c7bb865a3f6012f2f6616b705be89bcb078f16cc927fd8d494d428c1fc883599df93500e7f1451f1b0f4c375b31a93691b315dd3cbce574374e398ff0e7a86fdc0f0a470d79d6b1532300c9a6db714f8c716e8c975a9a0e5fbf63b6338f60ba4c0015a9ea41af60ff7274cb0e17379dd6ba278809e9997b46dba177743666e71c019f756ac218851867030b7bf55dba708c1013e3e857d032f0417f61764d86c26eb430ca40b8dc3a8809f518314ec39b1c127b356478d5821f4083d66b75cdf5f7e9e24d75ceccaa8324e8179a13eb20e42e728e1f9e0bf91b04e6"}, 0xe1) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x61ed, 0x5, 0x6, 0x3f, [0x931, 0x8000]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0xfc}}}, 0x4) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5c}, "8f2e0bcf4445eb76a471f52c5a6633a12a1dbb2c3996347904eeaf10f4b1e7859e528c3c90d056d47785e8200a3b7fdeae5b21f9404be7a88e08748e60a72069bd23e38c4dc1f1108439d01dc4f02dfb4bc4d28ee11264daaaeeb647"}, 0x60) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0x0, 0x4}, "1b463782"}, 0x8) [ 208.461121][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 208.463729][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 208.466733][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 208.479672][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:28 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x0, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 208.515169][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 208.516030][ T6057] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.539990][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 208.542155][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 208.544704][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 208.547867][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 208.680249][ T7714] loop5: detected capacity change from 0 to 32768 [ 208.898858][ T6050] Bluetooth: hci2: command 0x0409 tx timeout 00:03:29 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c80079ebaf2f3566924fd78991742a592e467b3948885ff01e293794d92e06b6708ccf7e4d0537304f244d4df6ab9f9c88fccce9cbd8d336860d203062b194d1ecb944bdc9ff8ee4462d2028b249bf2c56656cb404e80e6c44d746fc90a1b8fe73c0e302f6d0ac89ea60a34496cbc65903d1daee5dcfab452b9d6c7b"], 0x7d) (async) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x6, 0xc9, 0xc9, 0x96}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESHEX], 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xdd}, "070c7bb865a3f6012f2f6616b705be89bcb078f16cc927fd8d494d428c1fc883599df93500e7f1451f1b0f4c375b31a93691b315dd3cbce574374e398ff0e7a86fdc0f0a470d79d6b1532300c9a6db714f8c716e8c975a9a0e5fbf63b6338f60ba4c0015a9ea41af60ff7274cb0e17379dd6ba278809e9997b46dba177743666e71c019f756ac218851867030b7bf55dba708c1013e3e857d032f0417f61764d86c26eb430ca40b8dc3a8809f518314ec39b1c127b356478d5821f4083d66b75cdf5f7e9e24d75ceccaa8324e8179a13eb20e42e728e1f9e0bf91b04e6"}, 0xe1) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x61ed, 0x5, 0x6, 0x3f, [0x931, 0x8000]}}}}, 0x19) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0xfc}}}, 0x4) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5c}, "8f2e0bcf4445eb76a471f52c5a6633a12a1dbb2c3996347904eeaf10f4b1e7859e528c3c90d056d47785e8200a3b7fdeae5b21f9404be7a88e08748e60a72069bd23e38c4dc1f1108439d01dc4f02dfb4bc4d28ee11264daaaeeb647"}, 0x60) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0x0, 0x4}, "1b463782"}, 0x8) (rerun: 64) 00:03:29 executing program 2: syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200810, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/691, @ANYRESOCT], 0x4, 0x508, &(0x7f0000001a00)="$eJzs3c9vG1kdAPCvnV9uNrvJLnsABGxZFgqq6iTubrTqAZYTQmglxB5B6obEjaLYcRQ7SxN6yP4PlajUExz5Azj3xJ0LghsHyqESPyJQU4nDoBmP0zSx05CkcRt/PtJo5r3x+Pue3Xmv+UaZF8DAuhwR2xExGhGfRsRkXl/It/iovaWve7xzZ2F3585CIZLkk38WsvNpXey7JvVa/p6liPjJDyJ+Xjgct7m5tTJfq1XX8/J0q7423dzcurZcn1+qLlVXK5W52bmZD69/UDmzvr5TH82PvvrwD9vf+WXarIm8ptOP4plFa2t3fWQvTmo4In50xnH6ZSjvz2i/G8KJpP/e34qId7P7fzKGsm8TALjIkmQyksn9ZQDgoitmObBCsZznAiaiWCyX2zm8t2O8WGs0W1dvNTZWF9u5sqkYKd5arlVn8lzhVIwU0vJsdvy0XDlQvh4Rb0bE3bFLWbm80Kgt9vM/PgAwwF47MP//Z6w9/wMAF1zppBcu3z/bhgAA5+bE8z8A8Moy/wPA4DH/A8DgMf8DwOAx/wPA4DH/A8BA+fHHH6dbsrvTflL14mebGyuNz64tVpsr5frGQnmhsb5WXmo0lrJn9tSf9361RmNt9v3YuD313bVma7q5uXWz3thYbd3Mnut9szpyHp0CAI705jsP/pzO/Ns3LsX2o8dZXWcth725Onn2mvx80mVZD+AVctbr3QCvjqF+NwDoG6t9weA6RT5eKh8uiOfl8koRcelgZZIkyYtrEvCCXfnSvvz/jfYdfij/D1xI8v8wuOT/YXDJ/8PgSpLCcdf8j+O+EAB4ucnxAz1+//9Wvv9t/oiQny0efMW9F9kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeLl11v8t52uBT0SxWC5HvB4RUzFSuLVcq85ExBsR8aexkbG0PNvnNgMAp1V8VMjX/7oy+d7EwbOjhSdj2T4ifnH/k1/dnm+11v+Y1v9rr751L6+v9KP9AMDzdObp2/PPrvj5eOfOQmc7z/b8/fsRUWrH390Zjd29+MMxnO1LMRIR4/8u5OW2wr7cxWlsfx4RX+zW/0JMZDmQ9sqnB+OnsV8/1/jFZ+IXs3PtffpZfOEM2gKD5kE6/nzU7f4rxuVs3/3+L2Uj1Onl41/6Vgu72Rj4NH5n/BvqMf5dPm6M93//w57nPo/48nBEJ/buvvFnOPvprpTF6hb/vWPG/8tXvvZur3PJryOuRPf4+2NNt+pr083NrWvL9fml6lJ1tVKZm52b+fD6B5XpLEc93clUH/aPG1ffOKr/43H3r93it7/53v3/5jH7/5v/fvrTrx8R/9vf6Nb/Yrx9RPx0TvzWMePPj/+u1OtcGn+xx+c/fET8tO7qMeM//NvWoWXDAYD+aW5urczXatV1Bw4cnObge+cVazT+r6uS5ESxeo0YZ5F1A14Gezd9RDzpd2MAAAAAAAAAAAAAAICuzuMvlvrdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6u/wUAAP//pMrZVg==") (async) setresuid(0xee01, 0xee00, 0x0) (async) setfsuid(0x0) (async) setresuid(0x0, 0xee01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x3, 0x2, 0x1) (async) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) shutdown(r0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c9842, 0x0) 00:03:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:29 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00'}) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x0, 0x1}}, './file0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f0000000200)=@newtaction={0x1418, 0x30, 0x100, 0x70bd28, 0x25dfdbff, {}, [{0x1404, 0x1, [@m_gact={0x110, 0x19, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x188a, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1249, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a20, 0x2}}]}, {0xbf, 0x6, "598e2fae0a2ba71ad7bce96b38b3749bd4a28c385181f79f891b4a29991c0257a46ce4fd4692567745ff68391bdf19445e23487f9f9867cf81801c0b370dc085fdbb996b61415f20024b185642591d469148fb5de6f0bc08e632d8e7bb2c1714ea404f52163c77803e0ee80657ca18dbc9663e38420eccc4076c16af213b02696b193a1c8fd3d1fe233970976cec79ecafaeee85d800f5010e4b91e151affaa735c31541007a24e1fff7ce7c259e3ece64216d69207858ca2f3fea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x10a0, 0x20, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x836}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x66c}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x2, 0x3, 0x4, 0x400}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10000, 0x7, 0x10000000, 0x9, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5c6}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x250, 0xd, 0x0, 0x0, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb0, 0x6, {0xffc0, 'filter\x00', 0x3f, 0x9, "a8e9cbefb428f87e02e0557c8dc80e26ed66fc95f3789e233fbe482e87985417f3ab403f59a84d18b1b2e42b142fdae4457ec74a70d3da1532996b1264d468f3741c846eaccd87cf9c1abd55ea68f4f6c08daad46e782c84a8cbb82e42d61b8671c869e57628b3fd9c77561b04d6018e9d77eab67ec906762b5890ec39294a66c75f8ab52710"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7f0}, @TCA_IPT_TARG={0xa1, 0x6, {0x5, 'security\x00', 0x40, 0x81, "dc0c33978912cec716259b27d9e04220d9031878cee20529c262fc436f7eed8c46b963824c0359da2031b963ee3f569bf9c6c8a988dfaf833b6438435dff4223efb41ee89076a3efe309198f89b9bc2736d7902a482862cc595bfcf24f30bb6a03101050903dea2d06fa150c97438b8af91324e30e204a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x81}, @TCA_IPT_TARG={0x55, 0x6, {0x1, 'mangle\x00', 0x7f, 0x4, "9fe1ab4cf86339b3b8519e0a430fb337ae54e2f150d5fa029cb3d2efb218ea633db8392625f7f3c56e5421"}}]}, {0x6c, 0x6, "e9e618a841e85ac003f5393278c765296f730709c2aa61b19e371535453e090723be583162a34bd9addc893bb8a28619cb179af677f61a7b2504ca803bb14dd0df7a1e7b0dd75cc1d13b3549942f3c1e21cf41ce8b5529b9d0d6c8da0e19fec7d01dee85d07918ad"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1418}, 0x1, 0x0, 0x0, 0x2005}, 0x40000b8) socket(0x10, 0x3, 0xcf0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x42, {{0xa, 0x4e21, 0x6, @private0, 0x1}}, {{0xa, 0xfc0, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}, 0x108) 00:03:29 executing program 5: syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x1180085, &(0x7f0000000000)={[{@nobarrier}, {@noenospc_debug}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x7}}, {@skip_balance}, {@noenospc_debug}, {@noautodefrag}]}, 0xfe, 0x51cb, &(0x7f000000a400)="$eJzs3V9oVFceB/Az+aPxDyY+xV0W1n1YWcUFWRF2UdggGF2Whdn1YVnY7KZSxT9tCdJAsC/WUloQMRioLYXiQ1/6UlIplJYqwUJLoUUQKy2KrSUvLRRCpeBLS8nceyYz53ozY6qN1c9Hkjvn/u4598xwH+Y75twJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEEI4sGbl33etnl5XVp/uHzt5ZNn2s6f2nbg2NLTlUgiV2v5KXv//9l3/2re76x89scPwP7NtX1/ZkFnXL7LGkqads/2afx4JIXQnA3Tm2x2dDX0r6QnC4eKA89p/vX90c/fglYlbpzdeuHpwQ/GpM6tnsSewWPLranruWhqo/e5Ijqi3Gy69StMlmvVPL7if5UkAAHdkU7W2qb8dzd/i1ttH03rSHkja40k7vkMYb2wsRDbukrJ5rk3rizTPgSwqLC2dZ1LPX/96u5r2T9pJ1LiDeTYfmkeanrJ5jiT1xZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP3k1Q9/+/FzL6/fVlaf7h87eWTZ9rOn9p24NjS05VIIfbX9laxcWf6bzj9/tmznlWOH3/j93p63T3Tm/eK2q+Hg8Gl88JfeEPY0VKbjsF+tCqHaXKg1w0vFwoHag7/FAgAAAA+SX9V+d9TbWRzsbmpXammyUvsXZWFx//X+0c3dg1cmbp3eeOHqwQ0LH69aMt7Abcert/vmfioNwTjG33S8uXo89HBhnPmlI6Z5/vOZJ2+cn/jD/8r6F/J/3/z5P75y8j8AAAA/hfyfjjO/Vvn/8jvPP9U1uOe9sv6F/L+26ZSF/B9nHPN/R1hY/gcAAID72b3O/wOFcebXKv9/f27q3MXvjr1S1r+Q/ze1l/+7Gqcdd34UJ3yoN4RNraYOAAAAlIj/7z730ULM69knB2le75gZ7Z3quXa5bLxC/h9oL/933/VnBgAAACzUY2P/PXZ+bPx6Wb2Q/6vt5f+l93zmAAAAQLv2Hn/87PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9aLwAAAAB3SczpX49u/eGTwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DAqruePt8fPvrmg7Pv3213/f+PXO3Y9uvPfX5adv5D/j7aX/zsbt3fz+/8AAABgAX5p3//3n8I482t1//9vh258s+7Qs4Nl/Qv5f7y9/B+3Kxqf3lR8fZ7pDWHN7IP8boKvxdMdSgqT3Q2F7IVPeuyOPfLC5NKGQs1I0uNPvSH8bvbB0aSwOhbGk8LMqrxwJilcjIX8eqgXXk8KU/FKe2FVPt208FYs5AssJuMKihX1JRFJj5tlPWYLt+1xtX5yAACAh0oMz3mW7W5uhjTKTlZaHbC81QEdrQ7obHVAV3JAemDZ/jDcXIj7X9z2x5uXnnjz6VCikP/PtJf/40uxJNuUrf8Pcf1//r2G9fX/w7HQlxQmY6Ga3jGgGs+Rhd3j8Rx91bzHzJp6AQAAAB5o8XOBzkWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yd/dBdpX14cCffX/JZncRR0Dy0ygC5jdks5sYpZUpgeqgOFMXhzpOnWgiu8FtFhKTMJCUdpZAO1OYVFSmtaNDQx1HaZFGOo5StaRMgXHEqU1bpmK0Mr5Q21qGsdKh1KZz7znP3XOfsyf3huxCln4+f+x97v0+r+e+7H3OOfc5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/zf888C639i/6mfnV8V/cMYNH943cOl9H9124OjmzRuPhDBZf7wjC3cMruq68FsDlz22f9fnz53uv/9Ab14uj4cVtT+d+Z1bGrWuDOGLHSF0p4G1Q1mgJ78/FOtbNRTCaWE+0CgxPZiVSBsODw2EcDDMBxpV3T8QwlAhcOWRBx84UEvcMRDCuSGEvrSN7/RlbQykgfN6s8BgGtjRnQX+81imEfhSZxaAkxbfDI0X/aHJ5gyjC5ereP31LFrHXlzp8LpiYrQ6308uWeJOFfSmD0ye1NNWqo4lUXp7HPZuWwbvttJ2vt3TVvwilX9DOTYf6gudU9Pbtl43uyc+0hnGxrqqalqi5/nxp2+86kTSy+Z1GDswuiivw2fvfM/1Z0295cZbd5zzxMT7Ljh6st2s2rxLrS/kr7ll8zxGm3yeLIO3X+lb0mpfukII/++D3Td1/faRTxU//4tK8//R48//48s53nZ2FXPHWp8bzubm8ZGhmHhqOJubAwAAwLKxHPaa/vjsV/zems51j1fVV5r/r27v+H885J9P5rPRHg5hUz1x80gIZ9YfzwJ3x+Y+MBLCa+qpyebAJUngcAhn1RNrGlUlJfpjidVJ4MnhPLApCTwcA5NJ4NMxcHsSuCUGDiWBq2LgcBK4NAbCTPM4/v9wPo62AwMxsCXbiIfiWQg/HY6tJdvq242qAAAAFkk+O+xpvls41+FkM8Tp5aGB42WYC+FQPAO7soa+pIZ0BtuYVlXW0N2qhs5WNTTGPXf84Zdq7mhVc+k0jI7mDJe+4g/PX/W1G74QKpTm/+PHn//3LdCRjtLx/xCuqP+NuTvzyGwjvmWyKQMAAABwEibeMPu1Pzn7TW+uipfm/5vaO/8/7hMpnv4fHo27IbaPhDDeHMiqfXM5kB31XpEHAAAAYDloHI9vHAufyW+zU7TT+XQ5/+QJ5o8H/jctmP+XwtTp23/41Maq/pbm/5Ptnf8/2HybdeLh2IuPjYTQXwg8EntZC9StjoHvXdwcyMf/cNwAt8Wq8hMTGlXdFktsiYHxJHCwqsQ3GyXObA7kT1aj8Zsb45jJSxQCAAAA8IKLuwPicfl4/v+FE9//0OaP7/tcVbnS/H/LiZ3/X58Hl07vn10RwrruELrSHwY8OpgtDBgDQx154quDWV1daVU3DYZwUW1gaVVP5Ov/d6drDB4ZyKqKgTNf+9mnz6slPjUQwrpi4LH33lXfMbInCTQa/9WBEF5dG23a+Bf6s8Z70sb/oD+EVxUCjao+0B9CrbHetKoH+/LrGKRV/VlfCKcXAo2q3tgXwt4AwDIV/5VOFR/cvXff9q2zs9O7ljAR9+EPhG0zs9NjV+2Yneqr6NNU0uemZYxuKo+ps82xH82XKLrn8rGRdtKN3wmOF/uS78cvnTiY34/fhXrq41zf03R3Qzrk159TbiId0osx5MFiJfNPYqn+mL83rAj91+2e3jV2w9Y9e3ZNZH/bzb4++xsPM2XbaiLdVoML9a2Nl0e7i6E/323VdJmrdXuu2blu9959a2eu2Xr19NXT175hfP34+g3jG9904braqMazvy2Gev5CVSdDPXZXeQjtXgPq+Q71ld2FSl6ITw0JCYnllth68Vf/8t6zPrGi6uOnNP/fefz5f/zUiZ/8+foMVcf/R+Nh/uzx+cP8W2LgYLvH/0erjuY3TgxYnQTmYmDOYX4AAABeGuLuxrg3M+6V7rlp7dgff/KRJ6vKleb/c+39/n+R1v9vLF1/edUy/2tiifGq9f/TZf4b6//PVa3/ny7z31j//+CLsP7/dY1Askl+av1/AADgpWBR1v8P7az/33J5//QCAaUMLZf3Ty8QUMrQchn/di8QcMLr/7/9udf1XPORV98SKpTm/7e3N/+3cD8AAACcOu46srHjwX/574eq4qX5/8H25v8v/Pp/oer8/9VVgcmqhQGt/wcAAMAyVbX+34bX/WTL536+6kdV5Urz/0Ptzf/jaRedTbljrc8NZ2vahXRNu6eGGz8ZAAAAgOWhM4yNtbuiadPKqJc8/zYfz5cCPV666K++fM0/PPLW9/ZX1Vea/x9ub/7f9LuMZ+98z/VnTb3lxudu3XHOExPvu+Do/PF/AAAAYOm0u18CAAAAAAAAAAAAAAB48T29b+pd/3T2nZ+pipd+/x+uqD9e9fv/eN2/+PuClzfljrW2Xv8vv3/lO+7dW1+y8NHhEM4pBrbv335ayK/Nf34x8MDmNWfUEvvTEl/57qU/rCXenwbetvZlz9QSFyWBLXGRxLPSQLyq4jMrk0BcXvHv0kDcHofSQG8e+N2V2Tg60m3146FsW3Wk2+rxoRBGCoHGtvriUNZGRzrAO5JAY4AfSgNxgL+SBzrTXt27IutVDAzFon+0IusVAACnrPgtsCdsm5mdHo9f4ePtK7ubb6OmJctuKlfb0WbzR/Olye65fGyknXRX+l10/lrjPaGvNoSJ0tfVYpaO+igXp5YWm+7lFUNutdpbu7/OPtFN11s9ooFsRGNX7Zid6mk58A2ts6zvbpllojTZKWbprG/SNmppoy9tjKjNbdNGl+P9zjA21pXk+sUYHA1NFusVUVznr+pVUMwzN/XGb3zz2LFDVfWV5v+j7c3/+4rjeia/GMBcvLLezSMhnNnmiAAAAIB2ffvL/7h+xyd+55709ood1956weCPL64qV5r/r25v/h93jOWHgrO9HYfj9f8b8//RLHB3bO4DIyG8pp6ajCWyC+pfHkuMZ4G74w6TNbHElsnmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNtZTVzSX2BlLjCaBd8bA6iQwFgPjSWBlDGxKAv+2Mg9MJoGvx0CYad5Wf77S3hUAAOB5yOdZPc13QzrPO9TdKkNHqwyDrTJ0tsrQ1ypD1Sji/ftihp7k5JWOQqaetNaBpJZShngx/BPuVylD+GZzzrRgqel4/kHjfIOO5gz/etnrv3Pe7jXtX/9/vL35/2Dzbdb6w3H+P3/9vyzwSOzex+Kp46tj4HsXNwfyHQMPx8nubY2qJvMS+aT9tlhiUwysTgI7Y2BTEthyRR44eEZzIJ9pNxq/udH4TF6iEAAAAIAXXNxBEHfTxPn/n/7X3Z878PfX/nVVudL8f1N78//Y3opiY7c0al0Zwhc75nvTCKwdygJxP8ZQ/Hn8qqEQTivs4GiUmB7MSvQmDYeHBrJfqPemVd0/kK0xEO9feeTBBw7UEncMhHBuYe9Lo43v9GVtDKSB83qzwGAa2NGdBeKen0bgS51ZAE5aY69gfEHlp7o0jC5cruL191K5Jmg6vNI+0AXyLfSbq6XSlz6Q71NtOLGnrVQdS6L09jjs3bYc322j3m3FL1L5N5Rj86G+0Dk1vW3rdbN74iPFX7KWLNHzXPyVajvpRXgdzj3/3rbWl3ZgPPn4GF+43MKvw45Y3bN3vuf6s6becuOtO855YuJ9FxxtuxsV4g+F3/3Jl40WN+9S6wv5a27ZfZ5M+jxZjv8GVnvaajPYp37/q//+s8d/XhUvzf8n25v/dye3dc/Gjbl7JITXFzbuo3Hz//JI9jlYCGSfkqeXA9kh9+8PV35yAgAAwGJr7O5o7C+YyW+zE8LTeXI5/+QJ5o/7KzYtmL/dfm+7+aH9P/rbO75SFS/N/7ccf/7fn3TT8X/H/1kijv8v6FTfFd2fPjB3UruiS9WxJBz/X9Cp/m5z/H9Bjv87/r8Qx/9bcPx/Qaf601b6lrTTl64Qwtfff+fb79nxa+dVxUvz/53tzf+t/1cPfONnVev/bala/29n1fp/c9b/AwAAllTFQnPpPK+0el8pQ7p6XylDywUCWy4xaP2/E17/763v/J/rj73ikl2hQmn+P9fe/D++HFYUW18u6/+tvqKiqttjYKeFAQEAADgVVe0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MX17l94cuXm37xwpir+gzNu+PC+gUvv++i2A0c3b954JIQsa0cW7hhc1XXhtwYue2z/rs+fO91//4G+vFxPfnt2U+7spj88NxzCwcIjQzHx1HDtznzgynfcu7e7lnh0OIRzioHt+7efVkt8ejiE84uBBzavOaOW2J+W+Mp3L/1hLfH+NPC2tS97ppa4KA90NHc3hE+uzLrbkXb3wMoQRgqBRnd/fWVzVY02LssDnWkbnxnK2oiBoVj040NZG7VAfwhhNpaY6Q9hXXcIXWlVX+vLqupKq/qLvqyqGGhU9Vt9IVwUQuhOq/pub1ZVdzryv+nNqoqBM1/72afPqyUO9oawrhh47L13bawlPpQEGo2/qzeEV9deMmnj9/Vkjfekjd/RE8KrQgi9aYn/6M5K9KYlnugO4fRCoNH4B7tD2Bt4SYgfPlPFB3fv3bd96+zs9K4lTPTmbQ2EbTOz02NX7Zid6kv6VKWjkD520/Hjx3P06Ruvqt3ec/nYSIt0Z7h8bKQ7L9dT7/L6nqa7Gxar9+06gd7X07Ffg8VK5p+PUv0xf29YEfqv2z29a+yGrXv27JrI/rabfX32tyuPZttqYrG2VWeL8tHz3VbnFytZt+eanet27923duaarVdPXz197RvG14+v3zC+8U0XrquNajz7uxhDvev48aUY6iu7C5W8EB8AEi9IYu7U6IbESyPR2fTpNn6q/9MrfdGf72hP6Kt/QJemFcUsHfVRLsagLynHu5Zo0KUpSWlEE6WJQynL+tZZNpQmE/NZBrIs9e91pclhsabO+iaN9zvD2FjlZhltvlvcvD9ZYPO26/F807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2UHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WYfRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//5iSzPo=") 00:03:29 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x0, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 209.216790][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 209.219042][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 209.221033][ T6050] bt_err_ratelimited: 64 callbacks suppressed 00:03:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 209.221042][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 209.222971][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 209.226901][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 209.226949][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 209.240005][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:29 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x0, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 209.254543][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 0 00:03:29 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x21}, @l2cap_cid_signaling={{0x1d}, [@l2cap_conf_req={{0x4, 0x80, 0x13}, {0xffff, 0x8, [@l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x7fff}]}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0xdf1}}]}}, 0x26) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="102c1000000900aaaaaaaa000106000000050000"], 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:29 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00'}) (async) listen(r0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x0, 0x1}}, './file0\x00'}) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000001680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f0000000200)=@newtaction={0x1418, 0x30, 0x100, 0x70bd28, 0x25dfdbff, {}, [{0x1404, 0x1, [@m_gact={0x110, 0x19, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x188a, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1249, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a20, 0x2}}]}, {0xbf, 0x6, "598e2fae0a2ba71ad7bce96b38b3749bd4a28c385181f79f891b4a29991c0257a46ce4fd4692567745ff68391bdf19445e23487f9f9867cf81801c0b370dc085fdbb996b61415f20024b185642591d469148fb5de6f0bc08e632d8e7bb2c1714ea404f52163c77803e0ee80657ca18dbc9663e38420eccc4076c16af213b02696b193a1c8fd3d1fe233970976cec79ecafaeee85d800f5010e4b91e151affaa735c31541007a24e1fff7ce7c259e3ece64216d69207858ca2f3fea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x10a0, 0x20, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x836}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x66c}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x2, 0x3, 0x4, 0x400}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10000, 0x7, 0x10000000, 0x9, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5c6}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x250, 0xd, 0x0, 0x0, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb0, 0x6, {0xffc0, 'filter\x00', 0x3f, 0x9, "a8e9cbefb428f87e02e0557c8dc80e26ed66fc95f3789e233fbe482e87985417f3ab403f59a84d18b1b2e42b142fdae4457ec74a70d3da1532996b1264d468f3741c846eaccd87cf9c1abd55ea68f4f6c08daad46e782c84a8cbb82e42d61b8671c869e57628b3fd9c77561b04d6018e9d77eab67ec906762b5890ec39294a66c75f8ab52710"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7f0}, @TCA_IPT_TARG={0xa1, 0x6, {0x5, 'security\x00', 0x40, 0x81, "dc0c33978912cec716259b27d9e04220d9031878cee20529c262fc436f7eed8c46b963824c0359da2031b963ee3f569bf9c6c8a988dfaf833b6438435dff4223efb41ee89076a3efe309198f89b9bc2736d7902a482862cc595bfcf24f30bb6a03101050903dea2d06fa150c97438b8af91324e30e204a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x81}, @TCA_IPT_TARG={0x55, 0x6, {0x1, 'mangle\x00', 0x7f, 0x4, "9fe1ab4cf86339b3b8519e0a430fb337ae54e2f150d5fa029cb3d2efb218ea633db8392625f7f3c56e5421"}}]}, {0x6c, 0x6, "e9e618a841e85ac003f5393278c765296f730709c2aa61b19e371535453e090723be583162a34bd9addc893bb8a28619cb179af677f61a7b2504ca803bb14dd0df7a1e7b0dd75cc1d13b3549942f3c1e21cf41ce8b5529b9d0d6c8da0e19fec7d01dee85d07918ad"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1418}, 0x1, 0x0, 0x0, 0x2005}, 0x40000b8) (async) socket(0x10, 0x3, 0xcf0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x42, {{0xa, 0x4e21, 0x6, @private0, 0x1}}, {{0xa, 0xfc0, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}, 0x108) 00:03:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:29 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x21}, @l2cap_cid_signaling={{0x1d}, [@l2cap_conf_req={{0x4, 0x80, 0x13}, {0xffff, 0x8, [@l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x7fff}]}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0xdf1}}]}}, 0x26) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="102c1000000900aaaaaaaa000106000000050000"], 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) 00:03:29 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x209) socket$inet6(0xa, 0x6, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000001c0)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) io_setup(0x1f, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r3, 0x20002941, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, &(0x7f0000002940)="02", 0x1}]) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000180)=""/247, 0xf7) io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x9, r2, &(0x7f0000000080)="ad968334ea449dfdd2cec870c7ebdcb5aa589183823f409e9fa5b611541e", 0x1e, 0x1, 0x0, 0x7, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f0000000100)="9fd228888db094abdd9d869be60bd0ec0903862f45807aa678aa31d8d6d56a5bf4da120cd4c6f4ca7967cb20d59119c1937c8d01e1", 0x35, 0x100000001, 0x0, 0x2, r5}]) [ 209.365267][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 209.367652][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 209.369884][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 209.369939][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 209.380391][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 209.380634][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:29 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x0, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:29 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) (async) r1 = socket$inet6(0xa, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00'}) (async) listen(r0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x0, 0x1}}, './file0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f0000000200)=@newtaction={0x1418, 0x30, 0x100, 0x70bd28, 0x25dfdbff, {}, [{0x1404, 0x1, [@m_gact={0x110, 0x19, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x188a, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1249, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a20, 0x2}}]}, {0xbf, 0x6, "598e2fae0a2ba71ad7bce96b38b3749bd4a28c385181f79f891b4a29991c0257a46ce4fd4692567745ff68391bdf19445e23487f9f9867cf81801c0b370dc085fdbb996b61415f20024b185642591d469148fb5de6f0bc08e632d8e7bb2c1714ea404f52163c77803e0ee80657ca18dbc9663e38420eccc4076c16af213b02696b193a1c8fd3d1fe233970976cec79ecafaeee85d800f5010e4b91e151affaa735c31541007a24e1fff7ce7c259e3ece64216d69207858ca2f3fea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x10a0, 0x20, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x836}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x66c}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x2, 0x3, 0x4, 0x400}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10000, 0x7, 0x10000000, 0x9, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5c6}]}, {0x1004, 0x6, "ff4dc08e5c802768ff66a8d3e76fa85e78b626b2e1e561414206c92ad612712eb2cd04924b2595fb1d3baa7e64746063f2a7e52867368e3727ca50d9f75d0c7ef3e38560070e88d52692b58ba5dd2f04b65e72df67225e24808022c1366285f6fdaf52b08aa876ce3d87585cfb8dc628a5d888c0eb14dec7f5e1a86da3c2bb9570ec5c7a6d8754dbd86ff8140f38b97a6f4d02dc7e0228198e9949a8e2fee66e381697ca34748c35b1f33fccd2033819165be2fa4e5d3e457b1df1889e74d2b5c403a7f00fc6ee3f8a58c2fa06682b762ae4304ed556ab94ec9ae649855b13880fca6362f1440331a8612f0dc0b31d26a355b423d04a63ba9af2bfdbca005a06b57cc1a263143fd5624433c598d7ea06b35e70090efc188f3781e6c4de1f7d68e47672c01d4327c0614452e181186b8e744416fff031165104036d826620a17877dde8347b7d7305b765d838df4f272459bc49c3994a1c549a2dffcc3bc719316d2178adfcf7f62f22a3ba9359a34efee3ac5d413662a86cd04cd3ea3e4c3cc0d0db9b9e01ec8e03a8f4d877e9c960fa63d40ec9e38effaca507afe3e6ca983b70cc8438cd6dde29ecb4b97437f03b334266a048ab2717a1ecec5bd83ef28bfbbca0522f4b8d49e8ac2fa1fc00049f89e58a6acec9f548d710a730508f12fb8524ad33b0feb0e55ce5ea1d747a66a16e35dc3adeb880a1701598f752d793f77a962a7f57e80ce8b0e4dffbcae0ffdee4ea9150fa84fa2fb91ac18f1ab94860ba999b4e6b34bb8afdee23408bd51573ef3e16b9ac98a7d1b0338599cd4b3320eba00bdc0fe1b42c7ef594a5d4c16a7d79cd3543b5e2fa68713a15c49443ccbe27721a4ba543c1b21cba4200e63ce32591e893d45a925d383836ebce90a5cad101cbe83ea866cb5ec5a87aca385f9faf2f68b50402d59023b6cdf9cdd0d4f64754dde83515d76b63263f5a9354c015ce4e9ae2acec5b2c915faa0f76efd6bde738e395162af122f6552944495666041b31d345603e442a543eca559c44bebc9910754104d7551ed0204709bc3f89498d6ad32789b2b226c974f52f92007360d5d985cda66f5244b653635565ca5510ac0ed57925cdb5275163cdd668993eb3b4a3e7918260c07339b912dcbb9582e4bf8a9fc9e924c1e04f7798d46cc5e6e89e83baa178aaf09bd87a1163925981685ac341542fac59456ec771b5706fd41c7033f58fd8a6c922cfcbb56dda5c6b2dd37185e32459a25c50e99da106df05b94c09085a53f19db91e9a7d88cd50a910594645e2e82fda7c1d62c916fd31580017270c51ea7f804895db1ca632ad20fc1ba11027acce5ff4c0fd533e26ce1bda473b70128fa8e3515cb40365a2cf9225bbcae540d74d8d998ec6a1fd2e87a3a2c5ec0c6ee3622ad32dfd33a3cc860e1fb6fce4830ae76655cb7527f6eca2092184fd36575f571f914fb528aea3caf1ae94183f251652976ae6a33fbf2ea4bce10b69ae28a8715bff10fe936fd2699ede3c9a2d51604c55094a4a61422d4ba87e6ae437d27ae7d4a73c3562b549e72c8756d45ff580302b920bee1309b66aed78e2f1eec1ac18b942f553a66c80516fb3005ac546895da0f9dcea8c458893a5cbe86c0cd44e58152c5a3e0cdd2cdcf479a88a20c107eb996f6a521f16561883c9fcfa5221f1c9e306fb13f76eeabf9bd679e45d4f06cd79e9bacff0e03a7579de248dbb5bcdf08f12107b40542462b1406b2fcf446c22061c8a93a0d1f6479a632787b224e93e18eb5f37416c358d2653d22ea21171b9f24d89faf60173a17c557394e51999e253ca7b0ad0ba4aadb7d8701ee0e244bb83b1f0fac49e9d7a87d8e777ad564f07748dbf10e8881594a9d812deae0f66ec9cb03dda5330b4902538eeb2db3129b56a262992531d81b69435e83d0bc1842c0e9d1b3165f4b6bc480161dca10664d275e1e56f4378d30c7a9a86b86a148f623f0ba5c3290f06bf042457e7ec47a649d0d9b3eec648db0b7864568736f6f8103965a4f21279a313c493fc622c986bf78772e97cb5b270d781de8d3e4e81ce4a0f52cd6cc867ddbfdb0b0a6f7335f6d0ef49b4703dcb3ca5a34d4fa970dfb56f4ce0fbad1d47342a1cfd4a738a23360adc25b6071c6d219f58f4a96c699a53c3bb364d284d3f9d8e8e3e7ade7f8c90f1018828a5a128ae949e98f783bb91e8f9d613c7cf48f7886687ff13e0316f8b280de065f45f676e30a043a3ccb885a3dda10354600d1610b9376fc41f4d927190bfc9ad707d20b6c2afdc35d336e6198f0a369b508840c08bd819331f946b18a4be5e5343e009bfa76bdc19a101b858fc3c5b85252e711d8fed850435e01385ea614f093932fc79a59d41be84384c93fc521b241530f4938389e2488e5ab0decdb8759a06a85b61cf9b1b675c57acc9968a9260fc856c1c5e5063cf7bfffb9a878c04a574d949b84c72db66cfb5fc9396cacb3341b5c65fe1718bb95c7dbf38ca9ca71e088b4a2329a3c4886a34910fcf794677d61e7286a56955eefb8e5a6436cab649449637fe38650822d82e865a0adbbb581985db9e2872c225b2df8881770be68f07246d5a3aa7f32fe3259e929144977305c555af0894c7ca56f0a1c3bcc8003a96cd43a4370c099d6630bf4b64de49c4a471f1c1331822701aeccfc96c5986406c0bd2ee786348381301d9269c55af5818e27d8447805254c7f851bfcd89fc6c6dad4306c6680064b2444600219a9f2a5d69e68c9edd8cf39ab66202fe227cad7833b2ab28b9711f534fdfddec6bd3a700fb5e18a9d1fcf70863bc7f3e787001a475587997f9d61c398f8e5eda9232c8cf84e008bc70c9c352175c4663707ebafa8990d1d746c713ef5376d0712f409931812f5de7bca027b403a089964162c32d888e4a0783f6933d7d5da57488982312ab73f6da446f77960e255749538f2b95e4c2804175c26c959195f8ce580794ac4e58977638f167b9065ba86eb7fb9f8f73e7f507fd3e3334f143647ef2162887d66ad2327587e81df3c1b14cec07ee65cc20855fcb0fa62cabd4c99f80215589639438767777296a838d01337cbba3b87f50ae248b231e0c4c9b2e60d1de5d7983befd3d352c20b245b6d7c0eb4810a87d20a83c7a125f2980cff20c34becd35b8f33e8342ec90b4be68839b4bbf17870abb058386ea9ef9c0bbb8bb9afd952f1592e8661dfd0cfc4d1578c02a9c6cfacbfd85a6fd2f4efb9faa58997f9593ebee1d145aba8e566da0324388e7ca46428de3fef90323fc7f60cd371428a25f4899a5ec9a6b5372923918e532792e0cfd5b63c069b5ab3e2d93a1bb211586d1e15c43a4f1cd2f1fe955ca5f9475760f20f772813b3bc05c9c4b152b21b52ed2bd02f98d5e5deb3ac28e56792e353c5abebfd4a3373b985f16a44dcb8c08442074406a48f722f1c186b42d4cd4860f297af6becedf69a65b4e08151f46cbf0c0690e2e5942eb55790ead0f58f6600b742abd28f50946d3925071911ab509b0ec82993f53c15feb2c4cf9493b4b93752ad808a76ba2cc7aff928ee405d94ba3d7fa058e0285d5dab1964a808942b7066a42731c58506781b050434d37135f54f9d5e0589c6232f1c9045ea1a97a152d0dc69d9a45cdccdae1a54d7d1faf5c8ecb41a0a58ccff6fa2c5f3bdf0baf842946d4a1123ce571888c022097f2786541fe91dd6320313378fd5589d9052c9fcf805b712d1beab9e01f7360253b8ed40fa7914f55593ddc6275603cd5ab6c84785b5b4c4c011155f128b72034ca01c7594e0632b6afe8a6b22f6d3bfb971e1c33da0537c1acbeba8e87531bacfba4db1bbc78d28e3407d1d06061aab083d6416b7f3350033656801f896a51128e4b0c88934a948f5b6b912ef1851122de06bcf815b9a21e9e1fd00617d820c2e9bb6de8fe8e6c411de319f6e5821f8f188294ee5c574bb3b28da9f4e6fe3278e15a201480ee0170598e7d8734f5061a0d235b6ffc77f589941675921b49d350aede38e263c5badb1e87b95d8f9f0ed1186a6e7416d5fca62912ba94f3ed1bf39ba6ad19595c668a7959e27d84d91799571c14d13bca8f62091e6181749d00e17384c133ba6f788688d6780f4ebfa5a4ae23591b5134744e4e5d61d8e1d62d73e9d40ee3c1f50138e66c64c78461cf05664330d356aa6af31f6493e5dfc20ff71cada5ed153648dbb379edd978dc1e7b41711aeb3cb3ea54ca6fc82e6cab76d5d239041429822dde629442bae118c0cb41c3876747521f38c69603f04595d3ddafe64bdd6c5624ea16c111928dcb056d976fcb9663f54c3b21868a7445ed983fd5e47255576a86a5f59ee32202930e8b6f4266953f3e17f679a0610fd8a58620d016d348f196b6494af401a1df14930e9c415363bb6b6c267deb02b9ef1d8413aa630e466e1b64ff2bffec6c2b3e6da53653ad185ccc78bfdbe1db93cdc8274fadb7700ea71b222bc53c0f2a85d23eaa5c88b1cefa580abd5355b05ab59b3cc5530ab1245df2da001e44578d381db639236dfd54b762083d1e57f4f1c9a5f9c17dcc842e65340d8b2452dd913b699c1424bc7d2648866464c66d5a0c4dd802590a1580c27c8b084492a6d23d8ea981224156b1606f75ce2eefb7856b72014c8bcd081cd66d7909ce206d49335e81906bfccb1a25e2a318d0a8d14f98e6a9780111738b870e35838143f357ead6ef9e1c15174ff288a86ebdfc76bd6d8d53a59cd67bcbf9e0d3cd73610bcf5295eac865278d0ee80194b555691bfa187affd77cca092a52f128ad890997e1e73c0fad9d963f526a9db9ce178dd4f3d26a5db64eff57682e075d3cd14d58691088d4e3347209276d869da5b7423acf2b745923ec88946b1494b43428450cb240fac46c552fc27ec7fa5a980413d9d84b7a541052dfd18757b01eed829701d479cbe13e51de929dbff8f49717a986d4522e3b4a1098e6ef3796c10dec3a3f7ca8cbf27db07c6331d2f7f0da57a1f37eb314bc1d6af65039725670aeb49b547e09cd4207b3cefddc7380d86c2833b35229f56d78ad18a2b92f5c2b7fcb4996abc8740424b9722c5ec73bf98a4df10b21c4964dc470551a2c7974b687d1513e319f864e1ee65f5de3124c000b940965fb14e869c7774b726a7b3f257fcb167aad87e47f6c6eec95a08d473e64cf10930c26d5d44e83810894aad5235ec4b571f7f56678e8259165eca76c1f54b671af6841b50ff4b34a455119033ce6efac44dcae3f0768bf2ddcf8278001dab21347c6a25d7ed817b83e08ede35e59c303ff450489e7f947a58deae42328ddc8647394a242f230ec084ea145db1b205c54b9b059256ce6a6994ab5e990a07e6042eb99324307b8d1bb2e878ec4d2f1f99bf980b7d1caf541d8f4a5f1d55faecd0b904548afc6048480522b41a78e63917b11448d9292819d6a95c801b6c08f4539a4a2f8a1775e2ecff3efda53443d1cf3c349b06d176f06c7067a9cee42e47688d7a9a3a1d3d9ebef7c34508b55cf2c0253985a9578d4c44366974c1e57f5279d661294305d817ee2781dafc3cbbfa7c2677de21673f0649bd1fb1d5344e15b3a73de85490c15bea15c5fcd7b3a92b5c14002fe2c7e741b40592e53adb892500ba65d56ae178432c8582fea4f2e8be34af52f02b20b1c6e560ba9a5a7b175e798f6d2b0614036f99e0ebbf14160fa2a21cd831d762526a3f52fbb27e281d3629723e424b248596e3b045e4a9ec4c8c46df42b94f6b05de7933af681e85cd604d27444fa0be21cd5125f4b550fc3e146cee00a1029ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x250, 0xd, 0x0, 0x0, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb0, 0x6, {0xffc0, 'filter\x00', 0x3f, 0x9, "a8e9cbefb428f87e02e0557c8dc80e26ed66fc95f3789e233fbe482e87985417f3ab403f59a84d18b1b2e42b142fdae4457ec74a70d3da1532996b1264d468f3741c846eaccd87cf9c1abd55ea68f4f6c08daad46e782c84a8cbb82e42d61b8671c869e57628b3fd9c77561b04d6018e9d77eab67ec906762b5890ec39294a66c75f8ab52710"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7f0}, @TCA_IPT_TARG={0xa1, 0x6, {0x5, 'security\x00', 0x40, 0x81, "dc0c33978912cec716259b27d9e04220d9031878cee20529c262fc436f7eed8c46b963824c0359da2031b963ee3f569bf9c6c8a988dfaf833b6438435dff4223efb41ee89076a3efe309198f89b9bc2736d7902a482862cc595bfcf24f30bb6a03101050903dea2d06fa150c97438b8af91324e30e204a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x81}, @TCA_IPT_TARG={0x55, 0x6, {0x1, 'mangle\x00', 0x7f, 0x4, "9fe1ab4cf86339b3b8519e0a430fb337ae54e2f150d5fa029cb3d2efb218ea633db8392625f7f3c56e5421"}}]}, {0x6c, 0x6, "e9e618a841e85ac003f5393278c765296f730709c2aa61b19e371535453e090723be583162a34bd9addc893bb8a28619cb179af677f61a7b2504ca803bb14dd0df7a1e7b0dd75cc1d13b3549942f3c1e21cf41ce8b5529b9d0d6c8da0e19fec7d01dee85d07918ad"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1418}, 0x1, 0x0, 0x0, 0x2005}, 0x40000b8) (async) socket(0x10, 0x3, 0xcf0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x42, {{0xa, 0x4e21, 0x6, @private0, 0x1}}, {{0xa, 0xfc0, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}, 0x108) 00:03:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 209.481360][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 209.483616][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 209.485690][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 209.485738][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 209.491873][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 209.491925][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 209.670347][ T7748] loop5: detected capacity change from 0 to 32768 00:03:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000080), &(0x7f0000000280)=0x4) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x4e21, 0x29, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x30}, 0x0) r2 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000300)=""/251, &(0x7f0000000400)=0xfb) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0xf7f002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f00000000c0)="644cbc3896b6d158d8dffc9877e8b2fb628c41e51bbb04d05971a630c7c967f9cb0333d72913e801536108c728f3c63eb31c15f6003fa154dd37a485adfc1feeabecc465dbe418845b76acd7f6ffaec4778febba42bb60bda304f61b801938e6aadfc6ca6ed63758b05c3543ca096dd47a9de1bdf1f4a4927ee160bd4ee4ddc49233a26c61225bf9c6d777eaa5623c19b32a8877f24cbcd6f85eea539627afa49ed788150fe05545e42a46f75f098b6dbeb7ab98190be6c854a7314edfe7f1b050f5b99701d9e8ea59cb9a804d6985a1a93746abdcd102d2773e206766bddbf5a3bfd6ec4e2970b05b04336cd42716", &(0x7f00000001c0)=@udp, 0x1}, 0x20) 00:03:29 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x21}, @l2cap_cid_signaling={{0x1d}, [@l2cap_conf_req={{0x4, 0x80, 0x13}, {0xffff, 0x8, [@l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x7fff}]}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0xdf1}}]}}, 0x26) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="102c1000000900aaaaaaaa000106000000050000"], 0x14) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:29 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x0, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:29 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x209) (async) socket$inet6(0xa, 0x6, 0x9) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000001c0)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x5}, 0x1c) (rerun: 32) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) (async, rerun: 32) io_setup(0x1f, &(0x7f0000000140)=0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) io_submit(r3, 0x20002941, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, &(0x7f0000002940)="02", 0x1}]) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000180)=""/247, 0xf7) io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x9, r2, &(0x7f0000000080)="ad968334ea449dfdd2cec870c7ebdcb5aa589183823f409e9fa5b611541e", 0x1e, 0x1, 0x0, 0x7, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f0000000100)="9fd228888db094abdd9d869be60bd0ec0903862f45807aa678aa31d8d6d56a5bf4da120cd4c6f4ca7967cb20d59119c1937c8d01e1", 0x35, 0x100000001, 0x0, 0x2, r5}]) 00:03:29 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/107, 0x6b}, {&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000240)=""/25, 0x19}], 0x4, &(0x7f00000002c0)=""/174, 0xae}, 0xffffff01}], 0x1, 0x2, &(0x7f00000003c0)={0x0, 0x3938700}) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e21, 0x0, @private1}, 0x1c) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000480)={'veth1_macvtap\x00', @ifru_flags=0x1000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000400)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3e0, 0x0, 0x2, 0x3, 0x9, 0x400}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000880)=0x84) sendto$l2tp6(r0, &(0x7f0000000500)="666724d35874fdfe88fb799971e25e6af2ff775c6efec9662dae8c0333508586fac045cfdd09dc2e76353aa2e9709d0aa9348263f10661349f15fa2c40ae482df67bf7df89c55152ba78488a7d7ab3b80a7a602ba419ad4d3308cd7774469273ab0d64dc379d32dfc3bddda75f660e0a39c93409ee0959dc55f497933676e73e2c65d398f11ba476628c6dc26c042f18afed2a2ee7e8893abb934b", 0x9b, 0x0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @empty, 0x9, 0x1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newnexthop={0x28, 0x68, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x2}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x8880) sendto$l2tp6(r0, &(0x7f0000000700)="6127dccaed1cca63e31bb995df5fc79ad0c00886a2270d2f7991634e6ffa4caccfea5e8bfd4e31231fc42a50b765238fd303fddbf5172e47dd58c342d7fb8bae4c85de60aa7f166cd9e5fa643aeee10f27b61fa6c6ca42cb521cd3", 0x5b, 0x10, &(0x7f0000000780)={0xa, 0x0, 0x7, @local, 0x3, 0x4}, 0x20) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x401, @local, 0x8}, 0x1c) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) [ 209.827450][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 209.833530][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 209.837099][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 209.837396][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 209.847489][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 209.847923][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:29 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/107, 0x6b}, {&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000240)=""/25, 0x19}], 0x4, &(0x7f00000002c0)=""/174, 0xae}, 0xffffff01}], 0x1, 0x2, &(0x7f00000003c0)={0x0, 0x3938700}) (async, rerun: 64) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e21, 0x0, @private1}, 0x1c) (rerun: 64) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000480)={'veth1_macvtap\x00', @ifru_flags=0x1000}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000400)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3e0, 0x0, 0x2, 0x3, 0x9, 0x400}, 0x20) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000880)=0x84) (async) sendto$l2tp6(r0, &(0x7f0000000500)="666724d35874fdfe88fb799971e25e6af2ff775c6efec9662dae8c0333508586fac045cfdd09dc2e76353aa2e9709d0aa9348263f10661349f15fa2c40ae482df67bf7df89c55152ba78488a7d7ab3b80a7a602ba419ad4d3308cd7774469273ab0d64dc379d32dfc3bddda75f660e0a39c93409ee0959dc55f497933676e73e2c65d398f11ba476628c6dc26c042f18afed2a2ee7e8893abb934b", 0x9b, 0x0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @empty, 0x9, 0x1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newnexthop={0x28, 0x68, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x2}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x8880) (async) sendto$l2tp6(r0, &(0x7f0000000700)="6127dccaed1cca63e31bb995df5fc79ad0c00886a2270d2f7991634e6ffa4caccfea5e8bfd4e31231fc42a50b765238fd303fddbf5172e47dd58c342d7fb8bae4c85de60aa7f166cd9e5fa643aeee10f27b61fa6c6ca42cb521cd3", 0x5b, 0x10, &(0x7f0000000780)={0xa, 0x0, 0x7, @local, 0x3, 0x4}, 0x20) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x401, @local, 0x8}, 0x1c) (async, rerun: 32) listen(r0, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:29 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c11000000aaaa008000000000000000050000"], 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(0x0, 0x0) 00:03:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:29 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x0, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:29 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c11000000aaaa008000000000000000050000"], 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c11000000aaaa008000000000000000050000"], 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(0x0, 0x0) (async) 00:03:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000080), &(0x7f0000000280)=0x4) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x4e21, 0x29, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x30}, 0x0) r2 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000300)=""/251, &(0x7f0000000400)=0xfb) (async) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000300)=""/251, &(0x7f0000000400)=0xfb) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0xf7f002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f00000000c0)="644cbc3896b6d158d8dffc9877e8b2fb628c41e51bbb04d05971a630c7c967f9cb0333d72913e801536108c728f3c63eb31c15f6003fa154dd37a485adfc1feeabecc465dbe418845b76acd7f6ffaec4778febba42bb60bda304f61b801938e6aadfc6ca6ed63758b05c3543ca096dd47a9de1bdf1f4a4927ee160bd4ee4ddc49233a26c61225bf9c6d777eaa5623c19b32a8877f24cbcd6f85eea539627afa49ed788150fe05545e42a46f75f098b6dbeb7ab98190be6c854a7314edfe7f1b050f5b99701d9e8ea59cb9a804d6985a1a93746abdcd102d2773e206766bddbf5a3bfd6ec4e2970b05b04336cd42716", &(0x7f00000001c0)=@udp, 0x1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f00000000c0)="644cbc3896b6d158d8dffc9877e8b2fb628c41e51bbb04d05971a630c7c967f9cb0333d72913e801536108c728f3c63eb31c15f6003fa154dd37a485adfc1feeabecc465dbe418845b76acd7f6ffaec4778febba42bb60bda304f61b801938e6aadfc6ca6ed63758b05c3543ca096dd47a9de1bdf1f4a4927ee160bd4ee4ddc49233a26c61225bf9c6d777eaa5623c19b32a8877f24cbcd6f85eea539627afa49ed788150fe05545e42a46f75f098b6dbeb7ab98190be6c854a7314edfe7f1b050f5b99701d9e8ea59cb9a804d6985a1a93746abdcd102d2773e206766bddbf5a3bfd6ec4e2970b05b04336cd42716", &(0x7f00000001c0)=@udp, 0x1}, 0x20) [ 209.934898][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 209.937691][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 209.941936][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 209.942327][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 209.947271][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 209.947685][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:29 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x0, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:29 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x209) (async) socket$inet6(0xa, 0x6, 0x9) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (rerun: 64) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x5}, 0x1c) (async, rerun: 64) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) (async, rerun: 64) io_setup(0x1f, &(0x7f0000000140)=0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r3, 0x20002941, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, &(0x7f0000002940)="02", 0x1}]) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (rerun: 64) getdents64(r5, &(0x7f0000000180)=""/247, 0xf7) (async, rerun: 32) io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x9, r2, &(0x7f0000000080)="ad968334ea449dfdd2cec870c7ebdcb5aa589183823f409e9fa5b611541e", 0x1e, 0x1, 0x0, 0x7, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f0000000100)="9fd228888db094abdd9d869be60bd0ec0903862f45807aa678aa31d8d6d56a5bf4da120cd4c6f4ca7967cb20d59119c1937c8d01e1", 0x35, 0x100000001, 0x0, 0x2, r5}]) (rerun: 32) [ 210.001925][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 210.004733][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 210.007330][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 210.012393][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:30 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x0, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/107, 0x6b}, {&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000240)=""/25, 0x19}], 0x4, &(0x7f00000002c0)=""/174, 0xae}, 0xffffff01}], 0x1, 0x2, &(0x7f00000003c0)={0x0, 0x3938700}) (async) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/107, 0x6b}, {&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000240)=""/25, 0x19}], 0x4, &(0x7f00000002c0)=""/174, 0xae}, 0xffffff01}], 0x1, 0x2, &(0x7f00000003c0)={0x0, 0x3938700}) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e21, 0x0, @private1}, 0x1c) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000480)={'veth1_macvtap\x00', @ifru_flags=0x1000}) (async) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000480)={'veth1_macvtap\x00', @ifru_flags=0x1000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000400)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3e0, 0x0, 0x2, 0x3, 0x9, 0x400}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000400)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3e0, 0x0, 0x2, 0x3, 0x9, 0x400}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000880)=0x84) sendto$l2tp6(r0, &(0x7f0000000500)="666724d35874fdfe88fb799971e25e6af2ff775c6efec9662dae8c0333508586fac045cfdd09dc2e76353aa2e9709d0aa9348263f10661349f15fa2c40ae482df67bf7df89c55152ba78488a7d7ab3b80a7a602ba419ad4d3308cd7774469273ab0d64dc379d32dfc3bddda75f660e0a39c93409ee0959dc55f497933676e73e2c65d398f11ba476628c6dc26c042f18afed2a2ee7e8893abb934b", 0x9b, 0x0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @empty, 0x9, 0x1}, 0x20) (async) sendto$l2tp6(r0, &(0x7f0000000500)="666724d35874fdfe88fb799971e25e6af2ff775c6efec9662dae8c0333508586fac045cfdd09dc2e76353aa2e9709d0aa9348263f10661349f15fa2c40ae482df67bf7df89c55152ba78488a7d7ab3b80a7a602ba419ad4d3308cd7774469273ab0d64dc379d32dfc3bddda75f660e0a39c93409ee0959dc55f497933676e73e2c65d398f11ba476628c6dc26c042f18afed2a2ee7e8893abb934b", 0x9b, 0x0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @empty, 0x9, 0x1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newnexthop={0x28, 0x68, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x2}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x8880) sendto$l2tp6(r0, &(0x7f0000000700)="6127dccaed1cca63e31bb995df5fc79ad0c00886a2270d2f7991634e6ffa4caccfea5e8bfd4e31231fc42a50b765238fd303fddbf5172e47dd58c342d7fb8bae4c85de60aa7f166cd9e5fa643aeee10f27b61fa6c6ca42cb521cd3", 0x5b, 0x10, &(0x7f0000000780)={0xa, 0x0, 0x7, @local, 0x3, 0x4}, 0x20) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x401, @local, 0x8}, 0x1c) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000080), &(0x7f0000000280)=0x4) (async) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x4e21, 0x29, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x30}, 0x0) (async) r2 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000300)=""/251, &(0x7f0000000400)=0xfb) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0xf7f002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f00000000c0)="644cbc3896b6d158d8dffc9877e8b2fb628c41e51bbb04d05971a630c7c967f9cb0333d72913e801536108c728f3c63eb31c15f6003fa154dd37a485adfc1feeabecc465dbe418845b76acd7f6ffaec4778febba42bb60bda304f61b801938e6aadfc6ca6ed63758b05c3543ca096dd47a9de1bdf1f4a4927ee160bd4ee4ddc49233a26c61225bf9c6d777eaa5623c19b32a8877f24cbcd6f85eea539627afa49ed788150fe05545e42a46f75f098b6dbeb7ab98190be6c854a7314edfe7f1b050f5b99701d9e8ea59cb9a804d6985a1a93746abdcd102d2773e206766bddbf5a3bfd6ec4e2970b05b04336cd42716", &(0x7f00000001c0)=@udp, 0x1}, 0x20) 00:03:30 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000005640), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000200)={{}, 0x0, 0x6, @inherit={0x48, &(0x7f0000000180)={0x0, 0x0, 0x8000000000000001}}, @devid}) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="20000000290001000000000000000e00040000000c0016"], 0x20}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 00:03:30 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c11000000aaaa008000000000000000050000"], 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c11000000aaaa008000000000000000050000"], 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(0x0, 0x0) (async) [ 210.091050][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 210.093323][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 210.099721][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 210.111108][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:30 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r2 = getpgid(0xffffffffffffffff) statx(r0, &(0x7f0000000000)='\x00', 0x800, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={r2, 0xffffffffffffffff, r3}, 0xc) 00:03:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="0503460008003e000000020086dd", 0xe, 0x0, 0x0, 0x0) [ 210.176604][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 210.178984][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 210.180999][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 210.183106][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:30 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:30 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x5, 0xc8, 0xc9, 0x23}}}, 0x8) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xff, 0x2}, {0x101}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="042c11000000aaaaaaaaaa0001060000000500006a4c707d1a53902910418297b038a8a234e6c0d5dba8abb6af3aad1ccabaf45f53f3581d9171527d3b9b58895f55d80c76f91ba6f0298594cb31f59d25cc010fef3a75d4233dec087f114e210d20774dae742c19f8ecdfa386388acfc07ef1aea13e9a34b9c7"], 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x7, 0xc9, 0x3}}}, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc4}, "d04f5b511f9ec44ccbf9895d2ab08299d6a7b0c662cfac3ed3b169ca6cd579e251672a218a61495535e0160ea82aeaca7a497396cf999ff34d759704d30a038f3a38efb419836a58a7297d1a0b6f1df401de0cb780a0fbf60ca859dfaa8465c1cc4e1c03d5682dae3e3871392e670d85c3b111b638122081a843f955e40b7bfbb193cd656524fef999b2b91f90f29f98d8b2fbff7fababcc593afee10f6460ba03df76f21656b40255f68c542e5a0f76026f282ab72771fdbe8e85ac59883d42e67d9ceb"}, 0xc8) [ 210.231003][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 210.233223][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:30 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x5, 0xc8, 0xc9, 0x23}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x5, 0xc8, 0xc9, 0x23}}}, 0x8) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xff, 0x2}, {0x101}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="042c11000000aaaaaaaaaa0001060000000500006a4c707d1a53902910418297b038a8a234e6c0d5dba8abb6af3aad1ccabaf45f53f3581d9171527d3b9b58895f55d80c76f91ba6f0298594cb31f59d25cc010fef3a75d4233dec087f114e210d20774dae742c19f8ecdfa386388acfc07ef1aea13e9a34b9c7"], 0x14) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x7, 0xc9, 0x3}}}, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc4}, "d04f5b511f9ec44ccbf9895d2ab08299d6a7b0c662cfac3ed3b169ca6cd579e251672a218a61495535e0160ea82aeaca7a497396cf999ff34d759704d30a038f3a38efb419836a58a7297d1a0b6f1df401de0cb780a0fbf60ca859dfaa8465c1cc4e1c03d5682dae3e3871392e670d85c3b111b638122081a843f955e40b7bfbb193cd656524fef999b2b91f90f29f98d8b2fbff7fababcc593afee10f6460ba03df76f21656b40255f68c542e5a0f76026f282ab72771fdbe8e85ac59883d42e67d9ceb"}, 0xc8) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc4}, "d04f5b511f9ec44ccbf9895d2ab08299d6a7b0c662cfac3ed3b169ca6cd579e251672a218a61495535e0160ea82aeaca7a497396cf999ff34d759704d30a038f3a38efb419836a58a7297d1a0b6f1df401de0cb780a0fbf60ca859dfaa8465c1cc4e1c03d5682dae3e3871392e670d85c3b111b638122081a843f955e40b7bfbb193cd656524fef999b2b91f90f29f98d8b2fbff7fababcc593afee10f6460ba03df76f21656b40255f68c542e5a0f76026f282ab72771fdbe8e85ac59883d42e67d9ceb"}, 0xc8) 00:03:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r2 = getpgid(0xffffffffffffffff) statx(r0, &(0x7f0000000000)='\x00', 0x800, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={r2, 0xffffffffffffffff, r3}, 0xc) 00:03:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 210.324673][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 210.328435][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) (async) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000100)="0503460008003e000000020086dd", 0xe, 0x0, 0x0, 0x0) [ 210.331483][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 210.335746][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 210.337812][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.342050][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 210.527383][ T7861] loop2: detected capacity change from 0 to 32768 [ 210.530541][ T7861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7861) [ 210.535447][ T7861] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 210.537627][ T7861] BTRFS info (device loop2): using free space tree [ 210.551536][ T7861] BTRFS info (device loop2): enabling ssd optimizations [ 210.554577][ T7861] BTRFS info (device loop2): auto enabling async discard [ 210.560650][ T7861] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 00:03:30 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000005640), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000200)={{}, 0x0, 0x6, @inherit={0x48, &(0x7f0000000180)={0x0, 0x0, 0x8000000000000001}}, @devid}) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="20000000290001000000000000000e00040000000c0016"], 0x20}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 00:03:30 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:30 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x5, 0xc8, 0xc9, 0x23}}}, 0x8) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xff, 0x2}, {0x101}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="042c11000000aaaaaaaaaa0001060000000500006a4c707d1a53902910418297b038a8a234e6c0d5dba8abb6af3aad1ccabaf45f53f3581d9171527d3b9b58895f55d80c76f91ba6f0298594cb31f59d25cc010fef3a75d4233dec087f114e210d20774dae742c19f8ecdfa386388acfc07ef1aea13e9a34b9c7"], 0x14) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="042c11000000aaaaaaaaaa0001060000000500006a4c707d1a53902910418297b038a8a234e6c0d5dba8abb6af3aad1ccabaf45f53f3581d9171527d3b9b58895f55d80c76f91ba6f0298594cb31f59d25cc010fef3a75d4233dec087f114e210d20774dae742c19f8ecdfa386388acfc07ef1aea13e9a34b9c7"], 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x7, 0xc9, 0x3}}}, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc4}, "d04f5b511f9ec44ccbf9895d2ab08299d6a7b0c662cfac3ed3b169ca6cd579e251672a218a61495535e0160ea82aeaca7a497396cf999ff34d759704d30a038f3a38efb419836a58a7297d1a0b6f1df401de0cb780a0fbf60ca859dfaa8465c1cc4e1c03d5682dae3e3871392e670d85c3b111b638122081a843f955e40b7bfbb193cd656524fef999b2b91f90f29f98d8b2fbff7fababcc593afee10f6460ba03df76f21656b40255f68c542e5a0f76026f282ab72771fdbe8e85ac59883d42e67d9ceb"}, 0xc8) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc4}, "d04f5b511f9ec44ccbf9895d2ab08299d6a7b0c662cfac3ed3b169ca6cd579e251672a218a61495535e0160ea82aeaca7a497396cf999ff34d759704d30a038f3a38efb419836a58a7297d1a0b6f1df401de0cb780a0fbf60ca859dfaa8465c1cc4e1c03d5682dae3e3871392e670d85c3b111b638122081a843f955e40b7bfbb193cd656524fef999b2b91f90f29f98d8b2fbff7fababcc593afee10f6460ba03df76f21656b40255f68c542e5a0f76026f282ab72771fdbe8e85ac59883d42e67d9ceb"}, 0xc8) 00:03:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getpgid(0xffffffffffffffff) (async) r2 = getpgid(0xffffffffffffffff) statx(r0, &(0x7f0000000000)='\x00', 0x800, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={r2, 0xffffffffffffffff, r3}, 0xc) 00:03:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) (async) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="0503460008003e000000020086dd", 0xe, 0x0, 0x0, 0x0) [ 210.591280][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 210.599687][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 210.610938][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 210.621667][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 210.623682][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.625722][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 210.630919][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) accept4$inet6(r1, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:30 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x7, 0xc8, 0x8, 0x4, 0x81, 0x2}}}, 0xc) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:30 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 210.707486][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.719522][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 210.724983][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 210.727123][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 210.735258][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:30 executing program 4: syz_emit_vhci(0x0, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async, rerun: 32) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x7, 0xc8, 0x8, 0x4, 0x81, 0x2}}}, 0xc) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) [ 210.818795][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.821105][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.823202][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.825237][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.827420][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.829676][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.831784][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.833930][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.836008][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.837985][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.840138][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.842424][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.844491][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.846642][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.849829][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.851870][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.853939][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.856005][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.858110][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.861589][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.863607][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.865632][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.867728][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.870043][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.872083][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.874169][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.876176][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.878263][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.880542][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.882674][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.884794][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.886833][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.889630][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 210.978848][ T5586] Bluetooth: hci2: command 0x0409 tx timeout [ 211.063964][ T7933] loop2: detected capacity change from 0 to 32768 [ 211.071719][ T7933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7933) [ 211.076997][ T7933] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 211.079348][ T7933] BTRFS info (device loop2): using free space tree [ 211.092140][ T7933] BTRFS info (device loop2): enabling ssd optimizations [ 211.093939][ T7933] BTRFS info (device loop2): auto enabling async discard [ 211.098556][ T7930] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 00:03:31 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000005640), 0x0, 0x559e, &(0x7f0000005680)="$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") (rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000200)={{}, 0x0, 0x6, @inherit={0x48, &(0x7f0000000180)={0x0, 0x0, 0x8000000000000001}}, @devid}) (async) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="20000000290001000000000000000e00040000000c0016"], 0x20}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 00:03:31 executing program 5: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000a9a3daed4debe72b01bf0024000100000000000000000002000000f60d1e674014f9815123cea6", @ANYRES32=0x0], 0x18}}, 0x0) 00:03:31 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:31 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x7, 0xc8, 0x8, 0x4, 0x81, 0x2}}}, 0xc) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) [ 211.147152][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 211.150023][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 211.152194][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 211.169050][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 211.172938][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:31 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:31 executing program 5: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x3) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000a9a3daed4debe72b01bf0024000100000000000000000002000000f60d1e674014f9815123cea6", @ANYRES32=0x0], 0x18}}, 0x0) [ 211.199772][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 211.202014][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 211.204064][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 211.211111][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 211.257762][ T6047] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (6047) [ 211.541595][ T7967] loop2: detected capacity change from 0 to 32768 [ 211.547140][ T7967] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 211.550448][ T7967] BTRFS info (device loop2): using free space tree 00:03:31 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) accept4$inet6(r1, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:31 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c11000000ffffffffffff0106000000050092"], 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0xe}, {0x200, 0x7, [0x8, 0x80, 0x4b8, 0x81, 0x18]}}}}, 0x1b) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfd}, "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"}, 0x101) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "d99c2c0be981d86fcbc58e7c467c8a1af7"}, 0x15) 00:03:31 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:31 executing program 5: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x3) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000a9a3daed4debe72b01bf0024000100000000000000000002000000f60d1e674014f9815123cea6", @ANYRES32=0x0], 0x18}}, 0x0) [ 211.600993][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 211.605147][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 211.628057][ T7967] BTRFS info (device loop2): enabling ssd optimizations [ 211.631955][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 211.634189][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 211.636288][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 211.639325][ T7967] BTRFS info (device loop2): auto enabling async discard [ 211.648645][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 213.058812][ T6050] Bluetooth: hci2: command 0x0409 tx timeout 00:03:34 executing program 2: syz_mount_image$udf(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00bec69796901e0cae726334228e4e353e4e74caea531b9ab4b3df0105681bc950cc2d4690584519b2e50400ee6faa6d6240cf9a4c4553c0c3643d55c6fd4970c044f0fce130cc401d18ee811f4fb867d2376a50a94f1388563803d88c75d5e338c459cb618d8f"], 0x1, 0x56b, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0xff) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'gre0\x00', {0x2, 0x0, @broadcast}}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x250, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0xbe, 0x33, @probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @random="addfb857c406", {0x3, 0x1f}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x3, 0x1}]}, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x8d, "7261180f371601bc5b8be3f844957f0b9baf9b6e56a0948a6a345907984e1d448619c8a9b05bb94d7abb04ab1983926b2eaa930323d9be50b379316ac22e1124168ae5f9759f9c78e45c0703a93837f1b57e5a5f58d9f85a61e22aae8744576c321db2899340673a252710c65c5c4b3168af3d8f189aff19f2fdb169795a7421635f8b617aa5d1cd572616bdf3"}]}}, @NL80211_ATTR_FRAME={0x170, 0x33, @assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@device_b, {0xb, 0x2}}, @ver_80211n={0x0, 0x1f, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x0, 0x39, @random, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x7, 0x0, {0x7fffffff, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x1b06, 0x0, 0xff}}, [{0xdd, 0xa1, "b6dad0b62f990ab232c5fedc772ec17e814efa7b23e3c5de1ae87f6b6d067906c335d46f103a76d16dd115a3d37d7433dc3999a75dbe6867dbc7ee0554a57b374313d73fd56e6a296927e9c6b19dd474b7a0d52482a04d98bd88267578ee49ceb486511e5fed4626d25e243e927dec5714fd53cb46d7a3129b6b0c7ba65a0278ea8688b6831a0cd71079110d0d4c27cc795f15c87bec44fed721f2bb1aca440d25"}, {0xdd, 0x89, "3df70fd027e0b76fc1c952d02470a949f4c846740d49e3ec18bcf91f372c75add4b0776501143b14c8df1d2fe445195c055b36adc9e30c12048c60f6ac405960da4ffce1d16d9c86be2e16cd3e56eedd89382fe8e60088506c418b69a4d8843c01a2e494ab2da7937de4b8eedcd92c0a61a3277c144ad535f379eb1d0a65463e11a3ef608eb556d60b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x250}, 0x1, 0x0, 0x0, 0x11}, 0x4008000) 00:03:34 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c11000000ffffffffffff0106000000050092"], 0x14) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c11000000ffffffffffff0106000000050092"], 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0xe}, {0x200, 0x7, [0x8, 0x80, 0x4b8, 0x81, 0x18]}}}}, 0x1b) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0xe}, {0x200, 0x7, [0x8, 0x80, 0x4b8, 0x81, 0x18]}}}}, 0x1b) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfd}, "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"}, 0x101) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "d99c2c0be981d86fcbc58e7c467c8a1af7"}, 0x15) 00:03:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:34 executing program 5: r0 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000090000000000000000000000000000000000000000000000000000000002000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f736530000000cc000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff00000000726564697265637400000000396c27db39b2eedb0000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000005000000000000006c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f757000000000000000000000000000000000000000000000000000000800000000000000000000000000000061727000000000000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f34121000000000000000000000000000000000000eaffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8) r1 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000090000000000000000000000000000000000000000000000000000000002000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f736530000000cc000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff00000000726564697265637400000000396c27db39b2eedb0000000000000000000000000800000000000000feffffff0000000000000000000000000000000000b1c8e1a60000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000005000000000000006c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172700000000000000000000000000000000000000000000000000000000000380000005d000000000000000000000000000000000000007f0000010000000072ce35f34121000000000000000000000000000000000000eaffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8) 00:03:34 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:34 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) (async) accept4$inet6(r1, 0x0, &(0x7f0000000000), 0x80800) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 214.307190][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 214.311031][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 214.318016][ T6050] bt_err_ratelimited: 24 callbacks suppressed [ 214.318030][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 214.321403][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 214.328171][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 214.331144][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 214.343398][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 214.359024][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 214.368799][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 214.370808][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 201 00:03:34 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c11000000ffffffffffff0106000000050092"], 0x14) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0xe}, {0x200, 0x7, [0x8, 0x80, 0x4b8, 0x81, 0x18]}}}}, 0x1b) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfd}, "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"}, 0x101) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "d99c2c0be981d86fcbc58e7c467c8a1af7"}, 0x15) 00:03:34 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 214.372740][ T6050] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 214.389948][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 214.395589][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 214.411914][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 214.414812][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 214.417143][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 214.417475][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 214.423312][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 214.423723][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:34 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 214.454803][ T8022] ebtables: ebtables: counters copy to user failed while replacing table 00:03:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 214.509773][ T8036] loop2: detected capacity change from 0 to 512 [ 214.514202][ T8036] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 214.516319][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 214.518306][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 214.520523][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 214.520567][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:34 executing program 5: r0 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) r1 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) socket$inet(0x2, 0x80003, 0x2) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) (async) socket$inet(0x2, 0x80003, 0x2) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) (async) [ 214.525027][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 214.525077][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 214.539259][ T8036] UDF-fs: Scanning with blocksize 512 failed [ 214.565448][ T8036] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 214.567422][ T8036] UDF-fs: Scanning with blocksize 1024 failed [ 214.575367][ T8036] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 214.577352][ T8036] UDF-fs: Scanning with blocksize 2048 failed [ 214.599156][ T8036] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 214.615175][ T8039] ebtables: ebtables: counters copy to user failed while replacing table [ 214.620262][ T8036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.655647][ T8039] ebtables: ebtables: counters copy to user failed while replacing table 00:03:34 executing program 2: syz_mount_image$udf(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00bec69796901e0cae726334228e4e353e4e74caea531b9ab4b3df0105681bc950cc2d4690584519b2e50400ee6faa6d6240cf9a4c4553c0c3643d55c6fd4970c044f0fce130cc401d18ee811f4fb867d2376a50a94f1388563803d88c75d5e338c459cb618d8f"], 0x1, 0x56b, &(0x7f0000000640)="$eJzs3c1rXWkdB/Dfc5Kb3GTa9E47tlMd5cKIU0aseek4UzKMdiYGhMGByWSEWRmbpA3NS0ky0g4igyC4ELcuxcWgKIgLV4IL9Q9wLYK4UNfpqguxlXNy7lsaTZybm5f284H2nnvu77wuAt/nOed5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIeP2r10bH0lGfBQAAANBLX595e3Rc/gcAAIDH2jv6/wEAAAAAAADgpEuRxUuR4uV/b6VTxfdt1TeXVt+/Mzs1vftmQ6nYsq+oz/9Vx8Ynrrz0pZdfaXz+7+0P2sV4a+ada/U31lZury9sbCzM12dXl66vzS/sew/dbr/Ti8UNqK/cen9+cXGjPn55ouPnO7V/Dj51vjb5yrtTM43a2anp6Zm2mv7Kxz76IzzhAQAA8GQbiCy+ESl+eu9X6XREZNF9Ft6j7aDXhqKW5+/iImanposLWV6aW93Mf0yNIFzrzMQDjYx8CFm8K7WIs/m5Dkj0AAAA7F8lsvhMpLj4YCuNRERfIwd/vhgYcO8d1A7hJHfRHxHnIuJSnIDMDgAAAEdsMLJ4O1L8brkWZ8pcXeT/r0RMHvXJAQAAAAeiP7JYiRQvvLaVasXzABHx4uzUdP3Nd+tfW11ca6tNqexRP+nvBxwmzyYAAABwDFQji9NFj/9WevqoTwYAAADoiaHI4nOR4sf/+nYxrlwU49Kfmbw68tRI+whzF/bYT157OSI+tc938iuNsQbzbbODvSYAAACgUzVl8fdIcf/P1eL7pcY7AH97+PDhUZ8cAAAAcDBSFrVI8cMfbRVT47XPS9/XNr9/00l/97+35z9UfWPt9t31pRs3N3f9fbh67Vsbm+tz13f/eXvuwo7HIfaaxxAAAAD2oZKy+EekeP7Mz5u5s5wDoH9n7UevtrJptcyfzRhatBuMFO0GzXcITo+/0L68a2T9P8bHq5bH7evukgEAAOCJk1IWA5His394tpz7fzge6YMu6/4UKV5de66sywbyukYjQa34v7q4tLwwmtdORYrfLDdqo6gdLGvPtWrH8trf5/ud66ytlrXPtGrH89oHkeLm+u61n2jVTuS165Hilz+pN2qH89pTZe35Vu3l62vL8z27wQAAAHAMVFIWX4wUr/2xnhpZvrP/v9Xb/tF3Wv39H+7c0X/p8++2/7/Wtu7Dsh1isGyv6N+jveKtSHHx6eca11O0FTQeK9ie66DVXnEvUqy/11k7UNaebdWO7fvGAgAAwDGS5//JSDF487fNR+7LDFx+3T3/f3Ln2wE9yv/tcxLmx9y4+8GtueXlhXULFixYaC50/7cQAAAed3n+/36kuDX6l2Z/d5n/y0flW/n//ndb+X9y5456lP/Ptq2bLMcbqPRHVDdXblcuRFQ37n7whaWVuRsLNxZWr4yPXr06NjoxcaUy0Ojcby11fa8AAADgpMrz/3uR4gfP/qL5fv5++v+Hd+6oR/n/XNu6/JitTr+uLx0AAACeGHn+/1mkuLP66+Y4ep35v5Xa8/zfeM/+0vPbn83WgR7l/2fa1tXK4w4dzKUDAAAAAAAAAAAAAAAAAADAsVFJWfw1Unzv9f5UDvi/r/H/5nfuqEfv/59vWzcfhzP/X9c3FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6oLLJYihSfvrCVvpyv+GbEqfZPAAAA4MT7TwAAAP//onwchQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0xff) (async) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'gre0\x00', {0x2, 0x0, @broadcast}}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x250, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0xbe, 0x33, @probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @random="addfb857c406", {0x3, 0x1f}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x3, 0x1}]}, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x8d, "7261180f371601bc5b8be3f844957f0b9baf9b6e56a0948a6a345907984e1d448619c8a9b05bb94d7abb04ab1983926b2eaa930323d9be50b379316ac22e1124168ae5f9759f9c78e45c0703a93837f1b57e5a5f58d9f85a61e22aae8744576c321db2899340673a252710c65c5c4b3168af3d8f189aff19f2fdb169795a7421635f8b617aa5d1cd572616bdf3"}]}}, @NL80211_ATTR_FRAME={0x170, 0x33, @assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@device_b, {0xb, 0x2}}, @ver_80211n={0x0, 0x1f, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x0, 0x39, @random, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x7, 0x0, {0x7fffffff, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x1b06, 0x0, 0xff}}, [{0xdd, 0xa1, "b6dad0b62f990ab232c5fedc772ec17e814efa7b23e3c5de1ae87f6b6d067906c335d46f103a76d16dd115a3d37d7433dc3999a75dbe6867dbc7ee0554a57b374313d73fd56e6a296927e9c6b19dd474b7a0d52482a04d98bd88267578ee49ceb486511e5fed4626d25e243e927dec5714fd53cb46d7a3129b6b0c7ba65a0278ea8688b6831a0cd71079110d0d4c27cc795f15c87bec44fed721f2bb1aca440d25"}, {0xdd, 0x89, "3df70fd027e0b76fc1c952d02470a949f4c846740d49e3ec18bcf91f372c75add4b0776501143b14c8df1d2fe445195c055b36adc9e30c12048c60f6ac405960da4ffce1d16d9c86be2e16cd3e56eedd89382fe8e60088506c418b69a4d8843c01a2e494ab2da7937de4b8eedcd92c0a61a3277c144ad535f379eb1d0a65463e11a3ef608eb556d60b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x250}, 0x1, 0x0, 0x0, 0x11}, 0x4008000) 00:03:34 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x101) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x0, 0x0, 0x140, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, "739f"}}, @common=@hbh={{0x48}, {0x8795, 0x6, 0x0, [0xfffe, 0x2, 0x4, 0x7ff, 0x1, 0x2, 0x8, 0xb5, 0x3, 0x4, 0x80, 0x821a, 0x8ebe, 0x3aa, 0x5, 0x800], 0x10}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xff, 0xffffff00, 0xff], [0xff000000, 0xff000000, 0x0, 0xffffffff], 'netdevsim0\x00', 'veth1_to_bond\x00', {}, {}, 0xc, 0x5, 0x4, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e20], [0x4e23, 0x4e23], 0x2, 0x0, 0x0, 0x1}}, @common=@ipv6header={{0x28}, {0xf, 0x18, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xffffffff, 0xff], 'veth1_virt_wifi\x00', 'syz_tun\x00', {0xff}, {}, 0x73, 0x7, 0x1, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'`C', 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:34 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x4, 0x25}, {0x1000, 0x200, 0x9, [@l2cap_conf_mtu={0x1, 0x2, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x4d, 0x2, 0x4, 0x3, 0x7}}, @l2cap_conf_mtu={0x1, 0x2, 0x671}, @l2cap_conf_mtu={0x1, 0x2, 0x1ff}, @l2cap_conf_ews={0x7, 0x2, 0xfff8}]}}]}}, 0x32) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x9, 0xa}, {0x3, 0x6, 0x8, 0x9, [0x0]}}}}, 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc1}, "b793f8507dbd3184f3dea6f7c98791ece707c20bfeb3b9f84e743459799535189c44b59904029ba119dd384dd9faaa3f7bd53037422c1d4887c494b9dffc2f31575af98cb545bd414c1c730516e4e262bff317a6c7fb5575043c0f2679887f15dc0b3213f4721d3e13987c80ec3bbd535fe0b939024fb05abd27c5a2ad200c40bbb2b5987dd9a419c87d3e648d2b120ada03fa278429611f866881e3127bed91af769cfcba775781e5cb6cb4260bd96610e14bb1504840b11acc06f61c0ea0fb25"}, 0xc5) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESDEC=r2], 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1, 0x98, "a6f1ca", 0x800}, {@any, 0xf9, 0x70, 0x6, "a43abd", 0x6db}, {@none, 0x7, 0x4, 0x20, '/v$', 0x5a}, {@any, 0x7f, 0xc5, 0xe2, "647a94", 0x8000}, {@none, 0x3, 0x49, 0x4, "f20088", 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x48, 0x7f, 'x0\f', 0x7f}, {@any, 0x9, 0x3, 0x3, "e95de3", 0x2554}]}}}, 0x66) 00:03:34 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x21, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:34 executing program 5: r0 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000090000000000000000000000000000000000000000000000000000000002000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f736530000000cc000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff00000000726564697265637400000000396c27db39b2eedb0000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000005000000000000006c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f757000000000000000000000000000000000000000000000000000000800000000000000000000000000000061727000000000000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f34121000000000000000000000000000000000000eaffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8) (async) r1 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) [ 214.721650][ T6050] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 214.730336][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 214.735125][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 214.737460][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 214.737779][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 214.749051][ T6050] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 214.756830][ T6050] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 214.757298][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x2, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:34 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:34 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x4, 0x25}, {0x1000, 0x200, 0x9, [@l2cap_conf_mtu={0x1, 0x2, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x4d, 0x2, 0x4, 0x3, 0x7}}, @l2cap_conf_mtu={0x1, 0x2, 0x671}, @l2cap_conf_mtu={0x1, 0x2, 0x1ff}, @l2cap_conf_ews={0x7, 0x2, 0xfff8}]}}]}}, 0x32) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x9, 0xa}, {0x3, 0x6, 0x8, 0x9, [0x0]}}}}, 0x17) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc1}, "b793f8507dbd3184f3dea6f7c98791ece707c20bfeb3b9f84e743459799535189c44b59904029ba119dd384dd9faaa3f7bd53037422c1d4887c494b9dffc2f31575af98cb545bd414c1c730516e4e262bff317a6c7fb5575043c0f2679887f15dc0b3213f4721d3e13987c80ec3bbd535fe0b939024fb05abd27c5a2ad200c40bbb2b5987dd9a419c87d3e648d2b120ada03fa278429611f866881e3127bed91af769cfcba775781e5cb6cb4260bd96610e14bb1504840b11acc06f61c0ea0fb25"}, 0xc5) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESDEC=r2], 0x7) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1, 0x98, "a6f1ca", 0x800}, {@any, 0xf9, 0x70, 0x6, "a43abd", 0x6db}, {@none, 0x7, 0x4, 0x20, '/v$', 0x5a}, {@any, 0x7f, 0xc5, 0xe2, "647a94", 0x8000}, {@none, 0x3, 0x49, 0x4, "f20088", 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x48, 0x7f, 'x0\f', 0x7f}, {@any, 0x9, 0x3, 0x3, "e95de3", 0x2554}]}}}, 0x66) [ 214.798957][ T8061] loop2: detected capacity change from 0 to 512 00:03:34 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r3, 0x101) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x0, 0x0, 0x140, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, "739f"}}, @common=@hbh={{0x48}, {0x8795, 0x6, 0x0, [0xfffe, 0x2, 0x4, 0x7ff, 0x1, 0x2, 0x8, 0xb5, 0x3, 0x4, 0x80, 0x821a, 0x8ebe, 0x3aa, 0x5, 0x800], 0x10}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xff, 0xffffff00, 0xff], [0xff000000, 0xff000000, 0x0, 0xffffffff], 'netdevsim0\x00', 'veth1_to_bond\x00', {}, {}, 0xc, 0x5, 0x4, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e20], [0x4e23, 0x4e23], 0x2, 0x0, 0x0, 0x1}}, @common=@ipv6header={{0x28}, {0xf, 0x18, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xffffffff, 0xff], 'veth1_virt_wifi\x00', 'syz_tun\x00', {0xff}, {}, 0x73, 0x7, 0x1, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'`C', 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) (async) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) [ 214.810048][ T8061] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 214.812060][ T8061] UDF-fs: Scanning with blocksize 512 failed [ 214.832784][ T8061] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 214.833614][ T8058] ebtables: ebtables: counters copy to user failed while replacing table [ 214.836428][ T8061] UDF-fs: Scanning with blocksize 1024 failed [ 214.840758][ T8061] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 214.847500][ T8061] UDF-fs: Scanning with blocksize 2048 failed [ 214.850557][ T8061] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 00:03:34 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000540), &(0x7f0000000000)='./file0/file0\x00', 0x808040, &(0x7f0000000400)=ANY=[@ANYBLOB='nls=cp861,force,nobarrier,force,barrier,uid=', @ANYRESDEC=0x0, @ANYBLOB=',sma=\x00'/21, @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=vfat\x00,permit_directio,\x00'], 0x1, 0x6c1, &(0x7f0000001140)="$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") r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x20803, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1a000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25010000000000000008410000004c00180000000873797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x10) [ 214.877433][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 214.881366][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 214.885493][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 214.890281][ T8061] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.892498][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 214.920956][ T8078] loop5: detected capacity change from 0 to 1024 00:03:34 executing program 2: syz_mount_image$udf(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00bec69796901e0cae726334228e4e353e4e74caea531b9ab4b3df0105681bc950cc2d4690584519b2e50400ee6faa6d6240cf9a4c4553c0c3643d55c6fd4970c044f0fce130cc401d18ee811f4fb867d2376a50a94f1388563803d88c75d5e338c459cb618d8f"], 0x1, 0x56b, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0xff) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'gre0\x00', {0x2, 0x0, @broadcast}}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x250, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0xbe, 0x33, @probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @random="addfb857c406", {0x3, 0x1f}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x3, 0x1}]}, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x8d, "7261180f371601bc5b8be3f844957f0b9baf9b6e56a0948a6a345907984e1d448619c8a9b05bb94d7abb04ab1983926b2eaa930323d9be50b379316ac22e1124168ae5f9759f9c78e45c0703a93837f1b57e5a5f58d9f85a61e22aae8744576c321db2899340673a252710c65c5c4b3168af3d8f189aff19f2fdb169795a7421635f8b617aa5d1cd572616bdf3"}]}}, @NL80211_ATTR_FRAME={0x170, 0x33, @assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@device_b, {0xb, 0x2}}, @ver_80211n={0x0, 0x1f, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x0, 0x39, @random, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x7, 0x0, {0x7fffffff, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x1b06, 0x0, 0xff}}, [{0xdd, 0xa1, "b6dad0b62f990ab232c5fedc772ec17e814efa7b23e3c5de1ae87f6b6d067906c335d46f103a76d16dd115a3d37d7433dc3999a75dbe6867dbc7ee0554a57b374313d73fd56e6a296927e9c6b19dd474b7a0d52482a04d98bd88267578ee49ceb486511e5fed4626d25e243e927dec5714fd53cb46d7a3129b6b0c7ba65a0278ea8688b6831a0cd71079110d0d4c27cc795f15c87bec44fed721f2bb1aca440d25"}, {0xdd, 0x89, "3df70fd027e0b76fc1c952d02470a949f4c846740d49e3ec18bcf91f372c75add4b0776501143b14c8df1d2fe445195c055b36adc9e30c12048c60f6ac405960da4ffce1d16d9c86be2e16cd3e56eedd89382fe8e60088506c418b69a4d8843c01a2e494ab2da7937de4b8eedcd92c0a61a3277c144ad535f379eb1d0a65463e11a3ef608eb556d60b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x250}, 0x1, 0x0, 0x0, 0x11}, 0x4008000) syz_mount_image$udf(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00bec69796901e0cae726334228e4e353e4e74caea531b9ab4b3df0105681bc950cc2d4690584519b2e50400ee6faa6d6240cf9a4c4553c0c3643d55c6fd4970c044f0fce130cc401d18ee811f4fb867d2376a50a94f1388563803d88c75d5e338c459cb618d8f"], 0x1, 0x56b, &(0x7f0000000640)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) ftruncate(r0, 0xff) (async) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'gre0\x00', {0x2, 0x0, @broadcast}}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x250, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0xbe, 0x33, @probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @random="addfb857c406", {0x3, 0x1f}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x3, 0x1}]}, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x8d, "7261180f371601bc5b8be3f844957f0b9baf9b6e56a0948a6a345907984e1d448619c8a9b05bb94d7abb04ab1983926b2eaa930323d9be50b379316ac22e1124168ae5f9759f9c78e45c0703a93837f1b57e5a5f58d9f85a61e22aae8744576c321db2899340673a252710c65c5c4b3168af3d8f189aff19f2fdb169795a7421635f8b617aa5d1cd572616bdf3"}]}}, @NL80211_ATTR_FRAME={0x170, 0x33, @assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@device_b, {0xb, 0x2}}, @ver_80211n={0x0, 0x1f, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x0, 0x39, @random, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x7, 0x0, {0x7fffffff, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x1b06, 0x0, 0xff}}, [{0xdd, 0xa1, "b6dad0b62f990ab232c5fedc772ec17e814efa7b23e3c5de1ae87f6b6d067906c335d46f103a76d16dd115a3d37d7433dc3999a75dbe6867dbc7ee0554a57b374313d73fd56e6a296927e9c6b19dd474b7a0d52482a04d98bd88267578ee49ceb486511e5fed4626d25e243e927dec5714fd53cb46d7a3129b6b0c7ba65a0278ea8688b6831a0cd71079110d0d4c27cc795f15c87bec44fed721f2bb1aca440d25"}, {0xdd, 0x89, "3df70fd027e0b76fc1c952d02470a949f4c846740d49e3ec18bcf91f372c75add4b0776501143b14c8df1d2fe445195c055b36adc9e30c12048c60f6ac405960da4ffce1d16d9c86be2e16cd3e56eedd89382fe8e60088506c418b69a4d8843c01a2e494ab2da7937de4b8eedcd92c0a61a3277c144ad535f379eb1d0a65463e11a3ef608eb556d60b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x250}, 0x1, 0x0, 0x0, 0x11}, 0x4008000) (async) 00:03:34 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:34 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x4, 0x25}, {0x1000, 0x200, 0x9, [@l2cap_conf_mtu={0x1, 0x2, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x4d, 0x2, 0x4, 0x3, 0x7}}, @l2cap_conf_mtu={0x1, 0x2, 0x671}, @l2cap_conf_mtu={0x1, 0x2, 0x1ff}, @l2cap_conf_ews={0x7, 0x2, 0xfff8}]}}]}}, 0x32) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x9, 0xa}, {0x3, 0x6, 0x8, 0x9, [0x0]}}}}, 0x17) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x9, 0xa}, {0x3, 0x6, 0x8, 0x9, [0x0]}}}}, 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc1}, "b793f8507dbd3184f3dea6f7c98791ece707c20bfeb3b9f84e743459799535189c44b59904029ba119dd384dd9faaa3f7bd53037422c1d4887c494b9dffc2f31575af98cb545bd414c1c730516e4e262bff317a6c7fb5575043c0f2679887f15dc0b3213f4721d3e13987c80ec3bbd535fe0b939024fb05abd27c5a2ad200c40bbb2b5987dd9a419c87d3e648d2b120ada03fa278429611f866881e3127bed91af769cfcba775781e5cb6cb4260bd96610e14bb1504840b11acc06f61c0ea0fb25"}, 0xc5) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc1}, "b793f8507dbd3184f3dea6f7c98791ece707c20bfeb3b9f84e743459799535189c44b59904029ba119dd384dd9faaa3f7bd53037422c1d4887c494b9dffc2f31575af98cb545bd414c1c730516e4e262bff317a6c7fb5575043c0f2679887f15dc0b3213f4721d3e13987c80ec3bbd535fe0b939024fb05abd27c5a2ad200c40bbb2b5987dd9a419c87d3e648d2b120ada03fa278429611f866881e3127bed91af769cfcba775781e5cb6cb4260bd96610e14bb1504840b11acc06f61c0ea0fb25"}, 0xc5) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) close(r1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESDEC=r2], 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1, 0x98, "a6f1ca", 0x800}, {@any, 0xf9, 0x70, 0x6, "a43abd", 0x6db}, {@none, 0x7, 0x4, 0x20, '/v$', 0x5a}, {@any, 0x7f, 0xc5, 0xe2, "647a94", 0x8000}, {@none, 0x3, 0x49, 0x4, "f20088", 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x48, 0x7f, 'x0\f', 0x7f}, {@any, 0x9, 0x3, 0x3, "e95de3", 0x2554}]}}}, 0x66) 00:03:34 executing program 1: socket$inet6(0xa, 0x6, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x101) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x0, 0x0, 0x140, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, "739f"}}, @common=@hbh={{0x48}, {0x8795, 0x6, 0x0, [0xfffe, 0x2, 0x4, 0x7ff, 0x1, 0x2, 0x8, 0xb5, 0x3, 0x4, 0x80, 0x821a, 0x8ebe, 0x3aa, 0x5, 0x800], 0x10}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xff, 0xffffff00, 0xff], [0xff000000, 0xff000000, 0x0, 0xffffffff], 'netdevsim0\x00', 'veth1_to_bond\x00', {}, {}, 0xc, 0x5, 0x4, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e20], [0x4e23, 0x4e23], 0x2, 0x0, 0x0, 0x1}}, @common=@ipv6header={{0x28}, {0xf, 0x18, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xffffffff, 0xff], 'veth1_virt_wifi\x00', 'syz_tun\x00', {0xff}, {}, 0x73, 0x7, 0x1, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'`C', 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x0, 0x0, 0x140, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, "739f"}}, @common=@hbh={{0x48}, {0x8795, 0x6, 0x0, [0xfffe, 0x2, 0x4, 0x7ff, 0x1, 0x2, 0x8, 0xb5, 0x3, 0x4, 0x80, 0x821a, 0x8ebe, 0x3aa, 0x5, 0x800], 0x10}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xff, 0xffffff00, 0xff], [0xff000000, 0xff000000, 0x0, 0xffffffff], 'netdevsim0\x00', 'veth1_to_bond\x00', {}, {}, 0xc, 0x5, 0x4, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e20], [0x4e23, 0x4e23], 0x2, 0x0, 0x0, 0x1}}, @common=@ipv6header={{0x28}, {0xf, 0x18, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xffffffff, 0xff], 'veth1_virt_wifi\x00', 'syz_tun\x00', {0xff}, {}, 0x73, 0x7, 0x1, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'`C', 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) [ 214.968625][ T6066] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 00:03:34 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000540), &(0x7f0000000000)='./file0/file0\x00', 0x808040, &(0x7f0000000400)=ANY=[@ANYBLOB='nls=cp861,force,nobarrier,force,barrier,uid=', @ANYRESDEC=0x0, @ANYBLOB=',sma=\x00'/21, @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=vfat\x00,permit_directio,\x00'], 0x1, 0x6c1, &(0x7f0000001140)="$eJzs3UtoHPcdB/DvrFYvFxwl8aslEBFDWmpqSxZO617qllJ8CCWkh56FLcfCazvISlFCqZU+rqWHnHpKD7rlVNK7IT03FEquOgYKueTkm8rMzj5krbSSHyu5+XzM7Pxn/o/5z2/+M6PZxUyAb6yr59J8kCJXz725Vi5vbiy0NjcWJuvsVpKJJI2k2Z6luJMUnyVX/txsl/l2ubIuX+y2nY+WL7/9xdebX7aXmvVUlW/sVW+AiZ2r1usps0nG6vlO47u0+Omjm9/W3rVd29uvoruHV5KcrefJX5+oVXhiWzusd/M++c/Q6gc5b4EjqmjfN3eYSY4lmUpS/U1QXx0ao+3d07d+2B0AAACAg5o+eJUXHuZh1nL8WXQHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/l/V7/8v6qnRSc+m6Lz/f6Jelzqd+4fb5R3G9lHm35Pt+YNn3RkAAAAAAAAAGIFXH+Zh1nK8s7xVVL/5v9b3G/+38l7uZSkrOZ+1LGY1q1nJfJKZvoYm1hZXV1fmq5rJiT1qXsznA2pe3L2PV57yPgMAAAAAAADAETc1JP/W+M51v8/V3u//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwFBTJWHtWTSc66Zk0mkmmkkyU5daTzzvp50QxaOWD0fcDAAAAnsjUkOVBXrifh1nL8c7yVlE985+qnpen8l7uZDXLWU0rS7leP0OXT/2NzY2F1ubGwu1y2tnuT786UNerFtP+7mHwls9UJaZzI8vVmvO5lrtp5XoaVc3Smc2NhXJ+e3C/Piz7VPyktkdvxvrS18uP059W6b9s/xaheaBdfEyNXXNmqtzxbkTm6r6VNV7sRGBwJIYeneaeW5pPo/vNz4mBW9qq7RLzD3ttDxqkxx4pNfCbm9HZ6o2HRyNxsW/0ndo75sl3//HJr2+27ty6eePeuUPepWHuDy3xaCQW+iJxer+RKHIkI7F1oNJzVSROdpev5hf5Vc7lq8m3spLl/CaLWc1St9XFejyXnzPDItXvrWE9maiPS3u8DurTbLb3aTY/r1KLea2qezzLKXI3yVLeqP5dzHz3atA7wif37nd11jf2caXtc/Z71Wy2u2J6f/VGoIzri31x7Y36qSreL267Cvei9NLAKHXudfu/H/VpfqdOlC38Yc/7w6g9Gon5vki8vPd4+Vt1btxr3bm1cnPx3X1u7/V6Xp5Hfzr8u0Sf8gi/lKl6vGwfHWXey9077PZ4TdS/uLQ1duSd7NZrn6m/zN1c33am/jCXcimXq9KnqtLjO+5YZd7pbkvbr+Fl3pm+vEF/bwFw5B37/rGJ6f9O/2v64+k/Tt+cfnPqZ5M/mnxlIuP/HP9xc27s9cYrxd/zcX7Xe/4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe3733P7i12GotrQxONAZnFXvXWmxt1S8S26vMtkRRv8hnH4WLfTX43CQ6L8IbXnj2GXajWK8P2EFqdd7y9FgbLSuPNOBDB+1RTkzWoX6idqYHHa+xJIMKD7lwjD31SxEwYhdWb7974d77H/xg+fbiO0vvLN0Zv3Tp8tzlS28sXLix3Fqaa3/2VRjJy2+BUejd9PvXNpJXh9c9Oi9qBQAAAAAAAAAAgG+WUfwfhsPeRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5dvVcmg9SZH7u/Fy5vLmx0CqnTrpXspmkkaT4bVJ8llxJe8pMnVkqdtvOR8uX3/7i680ve201O+Ubyfqu9fZnvZ4ym2Ssnj+t9q4Nb2+il5wckF10I1MG7GwncHDY/hcAAP//1Xv/WA==") (async) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x20803, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1a000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25010000000000000008410000004c00180000000873797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 00:03:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 215.010177][ T6050] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 215.014946][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 215.023044][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 215.025352][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 215.031708][ T8088] loop5: detected capacity change from 0 to 1024 00:03:35 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x61}, "f4b012c7885c6a383680d4830407ff79fb2e2d7b6e2ca59eb224d673492aa2c3ffffffffd3a483bbe874c8661d7fdeab4964bda16bcdf73ca89e5d2fc74e4b4149ba43cd618bddfdf1a2bd50da76cb7049544582e3a8176d707f4f69c8263f32ae"}, 0x65) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x38}, "9b0b12cb10bf652cfa721deaff40e7d4cd216b5d873ab9df8987d0df63480ec231938e2eaaf9d7554462971187557cec26c31aaf3d1d2edf"}, 0x3c) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x9, 0x2}, {0x8}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x401, 0x9}}, @l2cap_conn_req={{0x2, 0x2, 0x4}, {0x0, 0x13}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x1}}]}}, 0x25) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x6, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:35 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000540), &(0x7f0000000000)='./file0/file0\x00', 0x808040, &(0x7f0000000400)=ANY=[@ANYBLOB='nls=cp861,force,nobarrier,force,barrier,uid=', @ANYRESDEC=0x0, @ANYBLOB=',sma=\x00'/21, @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=vfat\x00,permit_directio,\x00'], 0x1, 0x6c1, &(0x7f0000001140)="$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") r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x20803, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1a000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25010000000000000008410000004c00180000000873797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000540), &(0x7f0000000000)='./file0/file0\x00', 0x808040, &(0x7f0000000400)=ANY=[@ANYBLOB='nls=cp861,force,nobarrier,force,barrier,uid=', @ANYRESDEC=0x0, @ANYBLOB=',sma=\x00'/21, @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=vfat\x00,permit_directio,\x00'], 0x1, 0x6c1, &(0x7f0000001140)="$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") (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x20803, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1a000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25010000000000000008410000004c00180000000873797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) 00:03:35 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 215.074313][ T8101] loop2: detected capacity change from 0 to 512 [ 215.096622][ T8101] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 215.098775][ T8101] UDF-fs: Scanning with blocksize 512 failed 00:03:35 executing program 1: ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x6, 0x1) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') fcntl$dupfd(r3, 0x406, r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082bbd7000ffdbdf2502008500000c00d53f08000700", @ANYRES32=0x0, @ANYBLOB="0800030005000000080003000700000038000180080003006401010208000700", @ANYRES32=0x0, @ANYBLOB="14000400ff02000000000000000000000000000105000200020000000500020000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 00:03:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x18, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 215.132264][ T8101] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 215.134330][ T8101] UDF-fs: Scanning with blocksize 1024 failed [ 215.152252][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 215.154774][ T8101] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 215.156907][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 215.159306][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 215.163530][ T8101] UDF-fs: Scanning with blocksize 2048 failed [ 215.165680][ T8101] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 215.172450][ T8106] loop5: detected capacity change from 0 to 1024 [ 215.210019][ T8101] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.233748][ T6314] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 00:03:35 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:35 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x61}, "f4b012c7885c6a383680d4830407ff79fb2e2d7b6e2ca59eb224d673492aa2c3ffffffffd3a483bbe874c8661d7fdeab4964bda16bcdf73ca89e5d2fc74e4b4149ba43cd618bddfdf1a2bd50da76cb7049544582e3a8176d707f4f69c8263f32ae"}, 0x65) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x38}, "9b0b12cb10bf652cfa721deaff40e7d4cd216b5d873ab9df8987d0df63480ec231938e2eaaf9d7554462971187557cec26c31aaf3d1d2edf"}, 0x3c) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x38}, "9b0b12cb10bf652cfa721deaff40e7d4cd216b5d873ab9df8987d0df63480ec231938e2eaaf9d7554462971187557cec26c31aaf3d1d2edf"}, 0x3c) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x9, 0x2}, {0x8}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x401, 0x9}}, @l2cap_conn_req={{0x2, 0x2, 0x4}, {0x0, 0x13}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x1}}]}}, 0x25) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x22, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:35 executing program 1: ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000)) (async, rerun: 64) r0 = socket$inet6(0xa, 0x6, 0x1) (rerun: 64) listen(r0, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) (rerun: 32) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') fcntl$dupfd(r3, 0x406, r4) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082bbd7000ffdbdf2502008500000c00d53f08000700", @ANYRES32=0x0, @ANYBLOB="0800030005000000080003000700000038000180080003006401010208000700", @ANYRES32=0x0, @ANYBLOB="14000400ff02000000000000000000000000000105000200020000000500020000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 00:03:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x6a}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="d8ee3f972639212268fa8e655b3fee250370703043cbf6ea51fc88ae86caab5b5e0182e0b8f6ca1a794428bcb8204520b3e0b7aa4aed9b0384fc167edfb4bee913f86d67232578c813d8fa8488a4f473cfb7bcac48db51c453316fd45afc2d932a0230101fe715c0ab77356220c6ca9a7f78a49c57ede66773705045245318f990b58bb91dfce9624523dc449a80b358627ad230998e6f9a169fbc3b602297ea2c684f33a9a2d8f88b308c9d8ea43a22876daf3e9912b43bf31de796a7a02bf6bdbf5a6c7cf63a73c8ea6759c97405be08f2", 0xd2}, {&(0x7f0000000180)="f25ac53b95bb8a3212d74f4e4e7bbce14d774fec5d88b1cf012c248f5b2591e14fa1caa09c77746ad96abd5498e8625b0ad5b76fdba3949b85d1cdc3a3788403652d29a5fbf47eb64ab0f615c66e91da11d76c43505f6514e3217ee8188a369e107076c50c29e87e48a4001c3033c07b8ae2350b1de115ca49e91df8a40775b2a150ff4ae9fc4a68b284c5de89b713b1d84d96af4dd438d68153dad845231e40ed82d728fbd9d87d9d7052335ebc35a8992a371f52c26ddaed86229ec05130a5ed6ed9091331d09d71d9214eb25da8942c992e42eb37", 0xd6}, {&(0x7f0000000280)="6a170d9c0ba9cd923610256d1962f4c1854c130ddfbddb137519127adac8667a8a4b23aee0c20410d88d518559804e3d79a1f5180ad6b989673b13485fc94593cf33436a552bc9613fdc7d9834aeaf5980e85603c8ec4a6b4b7113504727f43a92aae73228c25f51a08bdf59fc94b773c9b778943bab33ba6e6fb522c2aaac899ede12a983ed01cb05ef88fbecb490390796d572d45739b7850c2eea3531f02acbd82ef76662275c14bff2dcc1b3331c1bc20b383b2daed4", 0xb8}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="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", 0xfd}], 0x5, &(0x7f0000000780)=[@ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x5b, 0x1, 0x2, [{@private=0xa010100, 0x81}, {@broadcast, 0x8}, {@rand_addr=0x64010102, 0xfffffff7}, {@multicast2, 0x40}, {@empty, 0x10001}, {@broadcast, 0x18cab58d}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1}, {@multicast2, 0x2}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x80}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000640)="71f6210fd6cc95f32d0f95bc447b6c8711966d842fd00ceff2", 0x19}], 0x1, &(0x7f00000006c0)}}], 0x5f, 0x24080040) [ 215.295651][ T8106] loop5: detected capacity change from 0 to 1024 [ 215.320452][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 215.324391][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 215.334364][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0xdd00, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:35 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:35 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2e6275732c696e6465783d6f6e2633939c705055a2fe316c25b82fe1e8687fbf0326a2673adec86063a6cb5e8016b775262d0b98"]) mkdirat(r0, &(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(r0, &(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x200) 00:03:35 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x61}, "f4b012c7885c6a383680d4830407ff79fb2e2d7b6e2ca59eb224d673492aa2c3ffffffffd3a483bbe874c8661d7fdeab4964bda16bcdf73ca89e5d2fc74e4b4149ba43cd618bddfdf1a2bd50da76cb7049544582e3a8176d707f4f69c8263f32ae"}, 0x65) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x38}, "9b0b12cb10bf652cfa721deaff40e7d4cd216b5d873ab9df8987d0df63480ec231938e2eaaf9d7554462971187557cec26c31aaf3d1d2edf"}, 0x3c) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x9, 0x2}, {0x8}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x401, 0x9}}, @l2cap_conn_req={{0x2, 0x2, 0x4}, {0x0, 0x13}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x1}}]}}, 0x25) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) [ 215.430791][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 215.433138][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 0 00:03:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x6a}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="d8ee3f972639212268fa8e655b3fee250370703043cbf6ea51fc88ae86caab5b5e0182e0b8f6ca1a794428bcb8204520b3e0b7aa4aed9b0384fc167edfb4bee913f86d67232578c813d8fa8488a4f473cfb7bcac48db51c453316fd45afc2d932a0230101fe715c0ab77356220c6ca9a7f78a49c57ede66773705045245318f990b58bb91dfce9624523dc449a80b358627ad230998e6f9a169fbc3b602297ea2c684f33a9a2d8f88b308c9d8ea43a22876daf3e9912b43bf31de796a7a02bf6bdbf5a6c7cf63a73c8ea6759c97405be08f2", 0xd2}, {&(0x7f0000000180)="f25ac53b95bb8a3212d74f4e4e7bbce14d774fec5d88b1cf012c248f5b2591e14fa1caa09c77746ad96abd5498e8625b0ad5b76fdba3949b85d1cdc3a3788403652d29a5fbf47eb64ab0f615c66e91da11d76c43505f6514e3217ee8188a369e107076c50c29e87e48a4001c3033c07b8ae2350b1de115ca49e91df8a40775b2a150ff4ae9fc4a68b284c5de89b713b1d84d96af4dd438d68153dad845231e40ed82d728fbd9d87d9d7052335ebc35a8992a371f52c26ddaed86229ec05130a5ed6ed9091331d09d71d9214eb25da8942c992e42eb37", 0xd6}, {&(0x7f0000000280)="6a170d9c0ba9cd923610256d1962f4c1854c130ddfbddb137519127adac8667a8a4b23aee0c20410d88d518559804e3d79a1f5180ad6b989673b13485fc94593cf33436a552bc9613fdc7d9834aeaf5980e85603c8ec4a6b4b7113504727f43a92aae73228c25f51a08bdf59fc94b773c9b778943bab33ba6e6fb522c2aaac899ede12a983ed01cb05ef88fbecb490390796d572d45739b7850c2eea3531f02acbd82ef76662275c14bff2dcc1b3331c1bc20b383b2daed4", 0xb8}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="13849b95715d3805eade6684bd3f93dcfd69b4ee5705a23a4ded4fa4e0940cb61406f0f19c103e2400c5c96591c3ec8580ce08453937da9dc2da5366ac8490067aa8cc164a9bec0cb6d03e2380d916a71dff6bad4e006cfa56c432901e107ed17ca13a34ea9613d34224d93d5cec1813ba7bdd60344dd69911906381ee51d0d5fa9b3b4dd09aeca2a112db52e00ceb2cc77c31e3ff6866da23e48e7970ddd1fe5767691254be7856f38b97a73c6a9103b18038266c2a83d8368f1535c21d747518b9b969c44d68526b54fd4904a4b6902716eecfc70102825e28ebb45e669b05ca94f2643af1888bb61b5681b92fc77b55988a81bf5c1536a6b49abae7", 0xfd}], 0x5, &(0x7f0000000780)=[@ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x5b, 0x1, 0x2, [{@private=0xa010100, 0x81}, {@broadcast, 0x8}, {@rand_addr=0x64010102, 0xfffffff7}, {@multicast2, 0x40}, {@empty, 0x10001}, {@broadcast, 0x18cab58d}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1}, {@multicast2, 0x2}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x80}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000640)="71f6210fd6cc95f32d0f95bc447b6c8711966d842fd00ceff2", 0x19}], 0x1, &(0x7f00000006c0)}}], 0x5f, 0x24080040) [ 215.440429][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 215.442673][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:35 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "bd0fa1"}}}, 0xd) syz_emit_vhci(0x0, 0x0) [ 215.473852][ T8144] overlayfs: failed to resolve '..bus': -2 00:03:35 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x6a}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="d8ee3f972639212268fa8e655b3fee250370703043cbf6ea51fc88ae86caab5b5e0182e0b8f6ca1a794428bcb8204520b3e0b7aa4aed9b0384fc167edfb4bee913f86d67232578c813d8fa8488a4f473cfb7bcac48db51c453316fd45afc2d932a0230101fe715c0ab77356220c6ca9a7f78a49c57ede66773705045245318f990b58bb91dfce9624523dc449a80b358627ad230998e6f9a169fbc3b602297ea2c684f33a9a2d8f88b308c9d8ea43a22876daf3e9912b43bf31de796a7a02bf6bdbf5a6c7cf63a73c8ea6759c97405be08f2", 0xd2}, {&(0x7f0000000180)="f25ac53b95bb8a3212d74f4e4e7bbce14d774fec5d88b1cf012c248f5b2591e14fa1caa09c77746ad96abd5498e8625b0ad5b76fdba3949b85d1cdc3a3788403652d29a5fbf47eb64ab0f615c66e91da11d76c43505f6514e3217ee8188a369e107076c50c29e87e48a4001c3033c07b8ae2350b1de115ca49e91df8a40775b2a150ff4ae9fc4a68b284c5de89b713b1d84d96af4dd438d68153dad845231e40ed82d728fbd9d87d9d7052335ebc35a8992a371f52c26ddaed86229ec05130a5ed6ed9091331d09d71d9214eb25da8942c992e42eb37", 0xd6}, {&(0x7f0000000280)="6a170d9c0ba9cd923610256d1962f4c1854c130ddfbddb137519127adac8667a8a4b23aee0c20410d88d518559804e3d79a1f5180ad6b989673b13485fc94593cf33436a552bc9613fdc7d9834aeaf5980e85603c8ec4a6b4b7113504727f43a92aae73228c25f51a08bdf59fc94b773c9b778943bab33ba6e6fb522c2aaac899ede12a983ed01cb05ef88fbecb490390796d572d45739b7850c2eea3531f02acbd82ef76662275c14bff2dcc1b3331c1bc20b383b2daed4", 0xb8}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="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", 0xfd}], 0x5, &(0x7f0000000780)=[@ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x5b, 0x1, 0x2, [{@private=0xa010100, 0x81}, {@broadcast, 0x8}, {@rand_addr=0x64010102, 0xfffffff7}, {@multicast2, 0x40}, {@empty, 0x10001}, {@broadcast, 0x18cab58d}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1}, {@multicast2, 0x2}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x80}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000640)="71f6210fd6cc95f32d0f95bc447b6c8711966d842fd00ceff2", 0x19}], 0x1, &(0x7f00000006c0)}}], 0x5f, 0x24080040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x6a}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) listen(r0, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="d8ee3f972639212268fa8e655b3fee250370703043cbf6ea51fc88ae86caab5b5e0182e0b8f6ca1a794428bcb8204520b3e0b7aa4aed9b0384fc167edfb4bee913f86d67232578c813d8fa8488a4f473cfb7bcac48db51c453316fd45afc2d932a0230101fe715c0ab77356220c6ca9a7f78a49c57ede66773705045245318f990b58bb91dfce9624523dc449a80b358627ad230998e6f9a169fbc3b602297ea2c684f33a9a2d8f88b308c9d8ea43a22876daf3e9912b43bf31de796a7a02bf6bdbf5a6c7cf63a73c8ea6759c97405be08f2", 0xd2}, {&(0x7f0000000180)="f25ac53b95bb8a3212d74f4e4e7bbce14d774fec5d88b1cf012c248f5b2591e14fa1caa09c77746ad96abd5498e8625b0ad5b76fdba3949b85d1cdc3a3788403652d29a5fbf47eb64ab0f615c66e91da11d76c43505f6514e3217ee8188a369e107076c50c29e87e48a4001c3033c07b8ae2350b1de115ca49e91df8a40775b2a150ff4ae9fc4a68b284c5de89b713b1d84d96af4dd438d68153dad845231e40ed82d728fbd9d87d9d7052335ebc35a8992a371f52c26ddaed86229ec05130a5ed6ed9091331d09d71d9214eb25da8942c992e42eb37", 0xd6}, {&(0x7f0000000280)="6a170d9c0ba9cd923610256d1962f4c1854c130ddfbddb137519127adac8667a8a4b23aee0c20410d88d518559804e3d79a1f5180ad6b989673b13485fc94593cf33436a552bc9613fdc7d9834aeaf5980e85603c8ec4a6b4b7113504727f43a92aae73228c25f51a08bdf59fc94b773c9b778943bab33ba6e6fb522c2aaac899ede12a983ed01cb05ef88fbecb490390796d572d45739b7850c2eea3531f02acbd82ef76662275c14bff2dcc1b3331c1bc20b383b2daed4", 0xb8}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="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", 0xfd}], 0x5, &(0x7f0000000780)=[@ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x5b, 0x1, 0x2, [{@private=0xa010100, 0x81}, {@broadcast, 0x8}, {@rand_addr=0x64010102, 0xfffffff7}, {@multicast2, 0x40}, {@empty, 0x10001}, {@broadcast, 0x18cab58d}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1}, {@multicast2, 0x2}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x80}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000640)="71f6210fd6cc95f32d0f95bc447b6c8711966d842fd00ceff2", 0x19}], 0x1, &(0x7f00000006c0)}}], 0x5f, 0x24080040) (async) [ 215.499371][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:35 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async, rerun: 64) syz_emit_vhci(0x0, 0x0) (async, rerun: 64) syz_emit_vhci(0x0, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "bd0fa1"}}}, 0xd) (rerun: 32) syz_emit_vhci(0x0, 0x0) [ 215.534506][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.537868][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.544746][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.546968][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.549865][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.552014][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:35 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2e6275732c696e6465783d6f6e2633939c705055a2fe316c25b82fe1e8687fbf0326a2673adec86063a6cb5e8016b775262d0b98"]) mkdirat(r0, &(0x7f0000000300)='./bus\x00', 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r1 = openat(r0, &(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x200) [ 215.560884][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.562930][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.564930][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.566966][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.569004][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.571259][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.573227][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.573737][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 215.575282][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.575317][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.581543][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.583567][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.585599][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.587629][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.589714][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.591773][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.593742][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.595722][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.597686][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.598461][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 215.599776][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.599813][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.602037][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 215.603796][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.609824][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.611861][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.614000][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.616019][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.618075][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.620245][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.622318][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.624337][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.626351][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.628330][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.630544][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.632642][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.634504][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.636414][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.638333][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.640481][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.642523][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.644461][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.645646][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 215.646431][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.650597][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.652616][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.654621][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.656676][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.659120][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.661105][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.663203][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.665236][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.667139][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.669291][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.671314][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.673587][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.675715][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.677680][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.679784][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.681753][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.683677][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.685709][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.687685][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 215.753031][ T8166] overlayfs: failed to resolve '..bus': -2 00:03:36 executing program 1: ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x6, 0x1) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80}, 0x1c) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) (async, rerun: 32) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') fcntl$dupfd(r3, 0x406, r4) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082bbd7000ffdbdf2502008500000c00d53f08000700", @ANYRES32=0x0, @ANYBLOB="0800030005000000080003000700000038000180080003006401010208000700", @ANYRES32=0x0, @ANYBLOB="14000400ff02000000000000000000000000000105000200020000000500020000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 00:03:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0xde00, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:36 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:36 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "bd0fa1"}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "bd0fa1"}}}, 0xd) (async) syz_emit_vhci(0x0, 0x0) (async) 00:03:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[]) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0/file0', [{}, {0x20, '/dev/fuse\x00'}, {0x20, '![\xd2/^\\\xaf$@'}, {0x20, '\x00'}, {0x20, 'fuse\x00'}, {0x20, '\x9d+&%'}], 0xa, "feb8427aab472a4a70cb482705"}, 0x41) dup3(r0, r1, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) 00:03:36 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2e6275732c696e6465783d6f6e2633939c705055a2fe316c25b82fe1e8687fbf0326a2673adec86063a6cb5e8016b775262d0b98"]) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2e6275732c696e6465783d6f6e2633939c705055a2fe316c25b82fe1e8687fbf0326a2673adec86063a6cb5e8016b775262d0b98"]) mkdirat(r0, &(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') openat(r0, &(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r1 = openat(r0, &(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x200) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x200) [ 216.195224][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.201447][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 216.203987][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.210921][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:36 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 216.220358][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.231116][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.247249][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.250506][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 216.253320][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[]) (async, rerun: 64) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0/file0', [{}, {0x20, '/dev/fuse\x00'}, {0x20, '![\xd2/^\\\xaf$@'}, {0x20, '\x00'}, {0x20, 'fuse\x00'}, {0x20, '\x9d+&%'}], 0xa, "feb8427aab472a4a70cb482705"}, 0x41) (async) dup3(r0, r1, 0x0) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) [ 216.259828][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 216.265781][ T8220] overlayfs: failed to resolve '..bus': -2 [ 216.287161][ T8209] overlayfs: failed to resolve '..bus': -2 00:03:36 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02016073009ee21ba64d6f00010003630800040004007f000600110402008f000624040040008000053f51001f000500400206108001200c00000800fbffffff0800000007023bff000102030001020900077d31832b576c4002ff030610b201ff010400000009000000000100000409040502060e3b23c22a52693c4b17c1fea4ba806de5da6a0a512c18905ad681e5d9ae4ffd12ecf1165adb9c904e1fe033869c4f0f877127e5f4a29f79cbe08e19073a2eb90f7f06bff6c19ce899146c0f8d9a14a2073dfe22c7d9"], 0x78) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x17}, "28991f16d84b2f32743f045f9c77b34d863aa18a172326"}, 0x1b) socket(0x27, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:36 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0xe000, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 216.352677][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.354839][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 1 00:03:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9a1933e225f11481eee2b4d9038f904cd9a727d113d822db7974992261eab3d13eb303095e5f767e9ee4a38d67fd84e1cb1963051f9fadd62caae91fff319e971300d0bbbb9387f995ff15f05bca8958a14283d6a6b08509161420808e58", 0x5e, 0x20000000, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}, 0x1c) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) [ 216.375233][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.377410][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 216.379739][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.381963][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:36 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02016073009ee21ba64d6f00010003630800040004007f000600110402008f000624040040008000053f51001f000500400206108001200c00000800fbffffff0800000007023bff000102030001020900077d31832b576c4002ff030610b201ff010400000009000000000100000409040502060e3b23c22a52693c4b17c1fea4ba806de5da6a0a512c18905ad681e5d9ae4ffd12ecf1165adb9c904e1fe033869c4f0f877127e5f4a29f79cbe08e19073a2eb90f7f06bff6c19ce899146c0f8d9a14a2073dfe22c7d9"], 0x78) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x17}, "28991f16d84b2f32743f045f9c77b34d863aa18a172326"}, 0x1b) (async) socket(0x27, 0x4, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) 00:03:36 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 216.432114][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.434674][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 216.437203][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.440995][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:36 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102381, 0x18fed, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/247, 0xf7) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/247, 0xf7) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000080)=r4, 0x1) [ 216.471881][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 216.473989][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x22000, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9a1933e225f11481eee2b4d9038f904cd9a727d113d822db7974992261eab3d13eb303095e5f767e9ee4a38d67fd84e1cb1963051f9fadd62caae91fff319e971300d0bbbb9387f995ff15f05bca8958a14283d6a6b08509161420808e58", 0x5e, 0x20000000, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}, 0x1c) (async) listen(r0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:36 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[]) (async, rerun: 32) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0/file0', [{}, {0x20, '/dev/fuse\x00'}, {0x20, '![\xd2/^\\\xaf$@'}, {0x20, '\x00'}, {0x20, 'fuse\x00'}, {0x20, '\x9d+&%'}], 0xa, "feb8427aab472a4a70cb482705"}, 0x41) (async) dup3(r0, r1, 0x0) (async, rerun: 32) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) (rerun: 32) [ 216.495058][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.497866][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 216.500924][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.509672][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:36 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02016073009ee21ba64d6f00010003630800040004007f000600110402008f000624040040008000053f51001f000500400206108001200c00000800fbffffff0800000007023bff000102030001020900077d31832b576c4002ff030610b201ff010400000009000000000100000409040502060e3b23c22a52693c4b17c1fea4ba806de5da6a0a512c18905ad681e5d9ae4ffd12ecf1165adb9c904e1fe033869c4f0f877127e5f4a29f79cbe08e19073a2eb90f7f06bff6c19ce899146c0f8d9a14a2073dfe22c7d9"], 0x78) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x17}, "28991f16d84b2f32743f045f9c77b34d863aa18a172326"}, 0x1b) socket(0x27, 0x4, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9a1933e225f11481eee2b4d9038f904cd9a727d113d822db7974992261eab3d13eb303095e5f767e9ee4a38d67fd84e1cb1963051f9fadd62caae91fff319e971300d0bbbb9387f995ff15f05bca8958a14283d6a6b08509161420808e58", 0x5e, 0x20000000, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}, 0x1c) (async, rerun: 32) listen(r0, 0x0) (rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:36 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) listen(r0, 0x7f) r1 = accept$inet6(r0, 0x0, &(0x7f0000000000)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x40) sendto$inet6(r1, &(0x7f0000000040)="5249c63063c1bcbc914754011e3c50b67b0606077b8caed1ec937deed045c2294f375728859400b35e800b7c9f75768cd093aa03bca7a7b6304a5e840b18d80b5800c78f06159f66172dda8156a980a3a227b359efa79031baa7f9b4b9cd94dd32376fe13e3872e46b99895cc3a42e0cf96ebf7928e8dc05da63c33094be3c0e3b57a4d006940cc4e092fe94a88dc92e436d57f5c0d91308e83d6f5aebcd72dc0c2ab4622273e5b5e34c33c21eac2ee3d49ebef3842f898e3f9c", 0xba, 0x4000004, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @mcast1, 0x8bf}, 0x1c) [ 216.559658][ T8255] fuse: Unknown parameter '/sys/kernel/debug/bluetooth/6lowpan_enable' 00:03:36 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102381, 0x18fed, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (rerun: 32) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) (async) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x40) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/247, 0xf7) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/247, 0xf7) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000080)=r4, 0x1) (rerun: 32) [ 216.566185][ T8255] fuse: Unknown parameter '/sys/kernel/debug/bluetooth/6lowpan_enable' [ 216.599101][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.601637][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 216.603896][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.606409][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 216.611137][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:36 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 216.627033][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 216.638539][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.642137][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 216.644952][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.650164][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:36 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}}}}, 0xf) 00:03:36 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 216.687686][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.707161][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.710246][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 216.712809][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.716814][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0xf4240, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @generic={0x26}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x2, 0x0, 0x1, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map, r1, 0xa, 0x20, r0, @prog_fd=r2, r3}, 0x20) 00:03:36 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}}}}, 0xf) 00:03:36 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102381, 0x18fed, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) (async) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x40) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/247, 0xf7) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/247, 0xf7) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000080)=r4, 0x1) 00:03:36 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:36 executing program 4: syz_emit_vhci(0x0, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (rerun: 64) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async, rerun: 64) syz_emit_vhci(0x0, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}}}}, 0xf) 00:03:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x100000001004, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) listen(r0, 0x0) [ 216.808490][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.811281][ T6050] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 216.817468][ T6050] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 216.825582][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.827949][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.829842][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 216.833062][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.835284][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.837369][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.839633][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.841888][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.844034][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.846194][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.848265][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.850625][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.852793][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.854995][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.857084][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.859443][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.862185][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.864468][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.866592][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.868884][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.870901][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.872855][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.874846][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.876779][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.878863][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.880780][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.882916][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.885097][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.887134][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.889330][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.891250][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.893280][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.895285][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.897231][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.901516][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.903905][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.906006][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.908035][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.910522][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.912059][ T8299] ------------[ cut here ]------------ [ 216.912480][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.914147][ T8299] WARNING: CPU: 0 PID: 8299 at net/ipv4/inet_connection_sock.c:587 inet_csk_get_port+0x1374/0x156c [ 216.916097][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.918845][ T8299] Modules linked in: [ 216.918859][ T8299] CPU: 0 PID: 8299 Comm: syz-executor.5 Not tainted 6.6.0-rc4-syzkaller-g19af4a4ed414 #0 [ 216.918875][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 216.918883][ T8299] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 216.918898][ T8299] pc : inet_csk_get_port+0x1374/0x156c [ 216.918912][ T8299] lr : inet_csk_get_port+0x1374/0x156c [ 216.918921][ T8299] sp : ffff80009c9a7960 [ 216.918926][ T8299] x29: ffff80009c9a7af0 x28: ffff0000c6f73a00 x27: dfff800000000000 [ 216.918947][ T8299] x26: ffff0000d5dd4b80 x25: 0000000000004e22 [ 216.920973][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.921922][ T8299] x24: ffff0000cdc4e200 [ 216.924237][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.926844][ T8299] x23: 0000000000000000 x22: ffff8000929e28c0 [ 216.928728][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.930120][ T8299] x21: 0000000000000000 [ 216.931432][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.932484][ T8299] x20: ffff0000cdc4e8b0 x19: ffff0000cdc4e8b8 [ 216.934328][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.935904][ T8299] x18: 0000000000000000 [ 216.938032][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.939047][ T8299] x17: 0000000000000000 x16: ffff80008051f9c4 x15: 0000000000000202 [ 216.939072][ T8299] x14: 0000000000000000 x13: 0000000000000002 x12: 00000000ffff0000 [ 216.939090][ T8299] x11: 0000000000040000 x10: 000000000000075a x9 : ffff80009cfb9000 [ 216.939109][ T8299] x8 : 000000000000075b x7 : 0000000000000000 x6 : 0000000000000001 [ 216.939127][ T8299] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 00000000ffffffff [ 216.941139][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.942720][ T8299] [ 216.942728][ T8299] x2 : 00000000ffffffff [ 216.944718][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.945755][ T8299] x1 : 00000000ffffffff x0 : 0000000000000001 [ 216.947751][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.949354][ T8299] [ 216.949362][ T8299] Call trace: [ 216.949368][ T8299] inet_csk_get_port+0x1374/0x156c [ 216.949384][ T8299] inet_csk_listen_start+0x104/0x2c8 [ 216.949395][ T8299] __inet_listen_sk+0x1cc/0x608 [ 216.949405][ T8299] inet_listen+0xac/0x120 [ 216.949414][ T8299] __sys_listen+0x1ac/0x21c [ 216.949427][ T8299] __arm64_sys_listen+0x5c/0x74 [ 216.949440][ T8299] invoke_syscall+0x98/0x2b8 [ 216.951427][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.952516][ T8299] el0_svc_common+0x130/0x23c [ 216.954527][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.956600][ T8299] do_el0_svc+0x48/0x58 [ 216.958464][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.960570][ T8299] el0_svc+0x58/0x16c [ 216.960593][ T8299] el0t_64_sync_handler+0x84/0xfc [ 216.960607][ T8299] el0t_64_sync+0x190/0x194 [ 216.960618][ T8299] irq event stamp: 485 [ 216.960623][ T8299] hardirqs last enabled at (484): [] __local_bh_enable_ip+0x24c/0x4ac [ 216.962571][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.964626][ T8299] hardirqs last disabled at (485): [] el1_dbg+0x24/0x80 [ 216.966649][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.967195][ T8299] softirqs last enabled at (476): [] lock_sock_nested+0xcc/0x11c [ 216.968181][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 216.970379][ T8299] softirqs last disabled at (478): [] inet_csk_get_port+0x218/0x156c [ 216.970403][ T8299] ---[ end trace 0000000000000000 ]--- [ 217.011890][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.013924][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.015938][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.017963][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.021730][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.023769][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.025923][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.027919][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.030013][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.032007][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:37 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) listen(r0, 0x7f) (async) r1 = accept$inet6(r0, 0x0, &(0x7f0000000000)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x40) (async) sendto$inet6(r1, &(0x7f0000000040)="5249c63063c1bcbc914754011e3c50b67b0606077b8caed1ec937deed045c2294f375728859400b35e800b7c9f75768cd093aa03bca7a7b6304a5e840b18d80b5800c78f06159f66172dda8156a980a3a227b359efa79031baa7f9b4b9cd94dd32376fe13e3872e46b99895cc3a42e0cf96ebf7928e8dc05da63c33094be3c0e3b57a4d006940cc4e092fe94a88dc92e436d57f5c0d91308e83d6f5aebcd72dc0c2ab4622273e5b5e34c33c21eac2ee3d49ebef3842f898e3f9c", 0xba, 0x4000004, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @mcast1, 0x8bf}, 0x1c) 00:03:37 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @generic={0x26}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x2, 0x0, 0x1, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map, r1, 0xa, 0x20, r0, @prog_fd=r2, r3}, 0x20) 00:03:37 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:37 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x147}, @l2cap_cid_signaling={{0x143}, [@l2cap_disconn_req={{0x6, 0x40, 0x4}, {0xf0, 0x3}}, @l2cap_create_chan_rsp={{0xd, 0xff, 0x8}, {0xfffa, 0xa116, 0xbd, 0x6}}, @l2cap_conf_rsp={{0x5, 0x0, 0x14}, {0x9, 0x8, 0xa8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_info_rsp={{0xb, 0x81, 0x103}, {0x2, 0x525a, "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"}}, @l2cap_disconn_req={{0x6, 0x29, 0x4}, {0x55e, 0xfff}}, @l2cap_disconn_req={{0x6, 0x81, 0x4}, {0xffc0, 0x5}}]}}, 0x14c) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x100000001004, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) listen(r0, 0x0) 00:03:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0xffffff85, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 217.439054][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.441357][ T6050] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 217.461787][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 217.462507][ T8310] ------------[ cut here ]------------ [ 217.465507][ T8310] WARNING: CPU: 1 PID: 8310 at net/ipv4/inet_connection_sock.c:587 inet_csk_get_port+0x1374/0x156c [ 217.468367][ T8310] Modules linked in: [ 217.469382][ T8310] CPU: 1 PID: 8310 Comm: syz-executor.5 Tainted: G W 6.6.0-rc4-syzkaller-g19af4a4ed414 #0 [ 217.469738][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 217.472392][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 217.472405][ T8310] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.472420][ T8310] pc : inet_csk_get_port+0x1374/0x156c [ 217.480527][ T8310] lr : inet_csk_get_port+0x1374/0x156c [ 217.481096][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 217.481993][ T8310] sp : ffff80009d417960 [ 217.482003][ T8310] x29: ffff80009d417af0 x28: ffff0000cfa17a80 x27: dfff800000000000 [ 217.482026][ T8310] x26: ffff0000cfa18c80 x25: 0000000000004e22 x24: ffff0001285d3100 [ 217.489379][ T8310] x23: 0000000000000000 x22: ffff8000929e28c0 x21: 0000000000000000 [ 217.489891][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 217.491552][ T8310] x20: ffff0001285d37b0 x19: ffff0001285d37b8 x18: 0000000000000000 [ 217.491579][ T8310] x17: 0000000000000000 x16: ffff80008051f9c4 x15: 0000000000000202 [ 217.497863][ T8310] x14: 0000000000000000 x13: 0000000000000000 x12: 00000000ffff0000 [ 217.499983][ T8310] x11: 0000000000000202 x10: 0000000000000000 x9 : 0000000000000000 [ 217.502133][ T8310] x8 : ffff0000d172b780 x7 : 0000000000000000 x6 : 0000000000000001 [ 217.504305][ T8310] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 00000000ffffffff [ 217.506475][ T8310] x2 : 00000000ffffffff x1 : 00000000ffffffff x0 : 0000000000000001 [ 217.508686][ T8310] Call trace: [ 217.509569][ T8310] inet_csk_get_port+0x1374/0x156c [ 217.510950][ T8310] inet_csk_listen_start+0x104/0x2c8 [ 217.512325][ T8310] __inet_listen_sk+0x1cc/0x608 [ 217.513640][ T8310] inet_listen+0xac/0x120 [ 217.514784][ T8310] __sys_listen+0x1ac/0x21c [ 217.516022][ T8310] __arm64_sys_listen+0x5c/0x74 [ 217.517372][ T8310] invoke_syscall+0x98/0x2b8 [ 217.518637][ T8310] el0_svc_common+0x130/0x23c [ 217.519882][ T8310] do_el0_svc+0x48/0x58 [ 217.520996][ T8310] el0_svc+0x58/0x16c [ 217.522068][ T8310] el0t_64_sync_handler+0x84/0xfc [ 217.523453][ T8310] el0t_64_sync+0x190/0x194 [ 217.524695][ T8310] irq event stamp: 389 [ 217.525800][ T8310] hardirqs last enabled at (388): [] __local_bh_enable_ip+0x24c/0x4ac [ 217.528485][ T8310] hardirqs last disabled at (389): [] el1_dbg+0x24/0x80 [ 217.530781][ T8310] softirqs last enabled at (380): [] lock_sock_nested+0xcc/0x11c [ 217.533333][ T8310] softirqs last disabled at (382): [] inet_csk_get_port+0x218/0x156c [ 217.535973][ T8310] ---[ end trace 0000000000000000 ]--- 00:03:37 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @generic={0x26}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x2, 0x0, 0x1, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map, r1, 0xa, 0x20, r0, @prog_fd=r2, r3}, 0x20) 00:03:37 executing program 4: syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x147}, @l2cap_cid_signaling={{0x143}, [@l2cap_disconn_req={{0x6, 0x40, 0x4}, {0xf0, 0x3}}, @l2cap_create_chan_rsp={{0xd, 0xff, 0x8}, {0xfffa, 0xa116, 0xbd, 0x6}}, @l2cap_conf_rsp={{0x5, 0x0, 0x14}, {0x9, 0x8, 0xa8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_info_rsp={{0xb, 0x81, 0x103}, {0x2, 0x525a, "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"}}, @l2cap_disconn_req={{0x6, 0x29, 0x4}, {0x55e, 0xfff}}, @l2cap_disconn_req={{0x6, 0x81, 0x4}, {0xffc0, 0x5}}]}}, 0x14c) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) 00:03:37 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 217.539423][ T5586] Bluetooth: hci2: command 0x0409 tx timeout 00:03:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 217.561508][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.564988][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 217.573721][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 217.575996][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 217.578145][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 217.580704][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x100000001004, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/247, 0xf7) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) listen(r0, 0x0) 00:03:37 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x147}, @l2cap_cid_signaling={{0x143}, [@l2cap_disconn_req={{0x6, 0x40, 0x4}, {0xf0, 0x3}}, @l2cap_create_chan_rsp={{0xd, 0xff, 0x8}, {0xfffa, 0xa116, 0xbd, 0x6}}, @l2cap_conf_rsp={{0x5, 0x0, 0x14}, {0x9, 0x8, 0xa8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_info_rsp={{0xb, 0x81, 0x103}, {0x2, 0x525a, "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"}}, @l2cap_disconn_req={{0x6, 0x29, 0x4}, {0x55e, 0xfff}}, @l2cap_disconn_req={{0x6, 0x81, 0x4}, {0xffc0, 0x5}}]}}, 0x14c) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x147}, @l2cap_cid_signaling={{0x143}, [@l2cap_disconn_req={{0x6, 0x40, 0x4}, {0xf0, 0x3}}, @l2cap_create_chan_rsp={{0xd, 0xff, 0x8}, {0xfffa, 0xa116, 0xbd, 0x6}}, @l2cap_conf_rsp={{0x5, 0x0, 0x14}, {0x9, 0x8, 0xa8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_info_rsp={{0xb, 0x81, 0x103}, {0x2, 0x525a, "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"}}, @l2cap_disconn_req={{0x6, 0x29, 0x4}, {0x55e, 0xfff}}, @l2cap_disconn_req={{0x6, 0x81, 0x4}, {0xffc0, 0x5}}]}}, 0x14c) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) [ 217.644011][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.646168][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 217.648377][ T5586] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 217.651010][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 217.663535][ T8328] ------------[ cut here ]------------ [ 217.664970][ T8328] WARNING: CPU: 0 PID: 8328 at net/ipv4/inet_connection_sock.c:587 inet_csk_get_port+0x1374/0x156c [ 217.667665][ T8328] Modules linked in: [ 217.668690][ T8328] CPU: 0 PID: 8328 Comm: syz-executor.5 Tainted: G W 6.6.0-rc4-syzkaller-g19af4a4ed414 #0 [ 217.671715][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 217.674333][ T8328] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 217.676463][ T8328] pc : inet_csk_get_port+0x1374/0x156c [ 217.677922][ T8328] lr : inet_csk_get_port+0x1374/0x156c [ 217.679438][ T8328] sp : ffff8000975c7960 [ 217.680600][ T8328] x29: ffff8000975c7af0 x28: ffff0000c6f73a80 x27: dfff800000000000 [ 217.682760][ T8328] x26: ffff0000d5dd4c80 x25: 0000000000004e22 x24: ffff0000cdc4b100 [ 217.685015][ T8328] x23: 0000000000000000 x22: ffff8000929e28c0 x21: 0000000000000000 [ 217.687216][ T8328] x20: ffff0000cdc4b7b0 x19: ffff0000cdc4b7b8 x18: 0000000000000000 [ 217.689404][ T8328] x17: 0000000000000000 x16: ffff80008051f9c4 x15: 0000000000000202 [ 217.691550][ T8328] x14: 0000000000000000 x13: 0000000000000000 x12: 00000000ffff0000 [ 217.693677][ T8328] x11: 0000000000000202 x10: 0000000000000000 x9 : 0000000000000000 [ 217.695860][ T8328] x8 : ffff00012cd10000 x7 : 0000000000000000 x6 : 0000000000000001 [ 217.697957][ T8328] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 00000000ffffffff [ 217.700116][ T8328] x2 : 00000000ffffffff x1 : 00000000ffffffff x0 : 0000000000000001 [ 217.702286][ T8328] Call trace: [ 217.703174][ T8328] inet_csk_get_port+0x1374/0x156c [ 217.704562][ T8328] inet_csk_listen_start+0x104/0x2c8 [ 217.705986][ T8328] __inet_listen_sk+0x1cc/0x608 [ 217.707300][ T8328] inet_listen+0xac/0x120 [ 217.708437][ T8328] __sys_listen+0x1ac/0x21c [ 217.709646][ T8328] __arm64_sys_listen+0x5c/0x74 [ 217.710938][ T8328] invoke_syscall+0x98/0x2b8 [ 217.712180][ T8328] el0_svc_common+0x130/0x23c [ 217.713444][ T8328] do_el0_svc+0x48/0x58 [ 217.714534][ T8328] el0_svc+0x58/0x16c [ 217.715587][ T8328] el0t_64_sync_handler+0x84/0xfc [ 217.716969][ T8328] el0t_64_sync+0x190/0x194 [ 217.718162][ T8328] irq event stamp: 457 [ 217.719296][ T8328] hardirqs last enabled at (456): [] __local_bh_enable_ip+0x24c/0x4ac [ 217.721860][ T8328] hardirqs last disabled at (457): [] el1_dbg+0x24/0x80 [ 217.724189][ T8328] softirqs last enabled at (448): [] lock_sock_nested+0xcc/0x11c [ 217.726773][ T8328] softirqs last disabled at (450): [] inet_csk_get_port+0x218/0x156c [ 217.729276][ T8328] ---[ end trace 0000000000000000 ]--- 00:03:38 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) (async) listen(r0, 0x7f) (async) r1 = accept$inet6(r0, 0x0, &(0x7f0000000000)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x40) (async) sendto$inet6(r1, &(0x7f0000000040)="5249c63063c1bcbc914754011e3c50b67b0606077b8caed1ec937deed045c2294f375728859400b35e800b7c9f75768cd093aa03bca7a7b6304a5e840b18d80b5800c78f06159f66172dda8156a980a3a227b359efa79031baa7f9b4b9cd94dd32376fe13e3872e46b99895cc3a42e0cf96ebf7928e8dc05da63c33094be3c0e3b57a4d006940cc4e092fe94a88dc92e436d57f5c0d91308e83d6f5aebcd72dc0c2ab4622273e5b5e34c33c21eac2ee3d49ebef3842f898e3f9c", 0xba, 0x4000004, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @mcast1, 0x8bf}, 0x1c) 00:03:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:38 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:38 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000012c0)) r0 = socket(0x40000000015, 0x5, 0x7160000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001200)="d4646bfd8129e1e9d2e5c2f6ad1b1076b474c4c70b357e1c27d1eefbed28886461ae2bb1f0a491006fcb3e59b731d7f5aec68abdf2eb5e993650cff7ea07d6b77b932809bac9e1f76f9a7953a03b45cf29bbbe83cf9761f073790feaaf364a6749fa192f5a58e575f8387788cb019d7d4293b52bd25ef1bc9cbf15d012d8bbe7f1", 0x81, 0x44800, 0x0, 0x0) bind$inet6(r0, &(0x7f00000015c0)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) r1 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x33) sendto$inet6(r1, &(0x7f00000001c0)="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", 0x1000, 0x60000001, &(0x7f00000011c0)={0xa, 0x4e20, 0x10000, @mcast1, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000001340)=0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x840448}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="2400fdff2a120003adbd7000fddbb3023a28df2500000000", @ANYRES32=0x0, @ANYBLOB="0b000c000700fffff3fff2ff"], 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) 00:03:38 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xff, 0x0, @fixed, 0x0, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012f20b000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x450000, 0x4) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip_vti0\x00'}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000104e8ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r13, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x10, 0x0, {0x10, 0x0, 0x0, r10}}, 0x20}}, 0x0) [ 218.404226][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 218.406382][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 218.408418][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 218.410617][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:38 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:38 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xff, 0x0, @fixed, 0x0, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xff, 0x0, @fixed, 0x0, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) 00:03:38 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000012c0)) r0 = socket(0x40000000015, 0x5, 0x7160000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001200)="d4646bfd8129e1e9d2e5c2f6ad1b1076b474c4c70b357e1c27d1eefbed28886461ae2bb1f0a491006fcb3e59b731d7f5aec68abdf2eb5e993650cff7ea07d6b77b932809bac9e1f76f9a7953a03b45cf29bbbe83cf9761f073790feaaf364a6749fa192f5a58e575f8387788cb019d7d4293b52bd25ef1bc9cbf15d012d8bbe7f1", 0x81, 0x44800, 0x0, 0x0) bind$inet6(r0, &(0x7f00000015c0)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) (async) r1 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x33) sendto$inet6(r1, &(0x7f00000001c0)="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", 0x1000, 0x60000001, &(0x7f00000011c0)={0xa, 0x4e20, 0x10000, @mcast1, 0x9}, 0x1c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 32) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000001340)=0x28) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x840448}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="2400fdff2a120003adbd7000fddbb3023a28df2500000000", @ANYRES32=0x0, @ANYBLOB="0b000c000700fffff3fff2ff"], 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) [ 218.443102][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type 00:03:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x3}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 218.448353][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 218.451502][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 218.459754][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:38 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x0, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x4}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 218.528052][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 218.532231][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 218.535156][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 218.540126][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x0, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/247, 0xf7) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000000)=0x5, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 00:03:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000734b00850619fbb7c75150926b000000006089f11608d291c1d332dbc8b006c8592f3a548e4dfae1c6783a178c9c9ab073d3949086efcf6b3212b7a8ef9af3e0edc2306e4be3b4889bfdf9910570b00ec8fc16ac294f2665d4fbec7cb85db1176db257109932d3970afd748dd7c8a7a2a7612b089c92764153e7ea969133e289ed2b0a38552243b7a59342f2f37509cc51aecfcc3d7bad7e5b7f2a2e3304dc03755b89605e41b16aba1801fcb842de4397964ede5516373cfd8a4b2be3a6fc26f5e0d84a0e6d4f97f508c4daefe3178fb7f3de59f7de7bdef0401ac5e0dcde47e3b4f9aa73161d13de639d442c77b3a301715be11253118f89cfee81a5c6857f60952ea0829699972634400e58f7db37be21ec07d2edcb099c30b5719ee003571ea67e87c81d1f1a4c3b9bb2d0c0b20a7e607d7777c1b409483c00000000000000000000000000000000281fb8b7131cc60d2289", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012f20b000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x450000, 0x4) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip_vti0\x00'}) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000104e8ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r13, @ANYBLOB="01"], 0x20}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x10, 0x0, {0x10, 0x0, 0x0, r10}}, 0x20}}, 0x0) 00:03:39 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xff, 0x0, @fixed, 0x0, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) 00:03:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x5}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:39 executing program 2: ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000012c0)) (async) r0 = socket(0x40000000015, 0x5, 0x7160000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001200)="d4646bfd8129e1e9d2e5c2f6ad1b1076b474c4c70b357e1c27d1eefbed28886461ae2bb1f0a491006fcb3e59b731d7f5aec68abdf2eb5e993650cff7ea07d6b77b932809bac9e1f76f9a7953a03b45cf29bbbe83cf9761f073790feaaf364a6749fa192f5a58e575f8387788cb019d7d4293b52bd25ef1bc9cbf15d012d8bbe7f1", 0x81, 0x44800, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f00000015c0)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) r1 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x33) sendto$inet6(r1, &(0x7f00000001c0)="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", 0x1000, 0x60000001, &(0x7f00000011c0)={0xa, 0x4e20, 0x10000, @mcast1, 0x9}, 0x1c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000001340)=0x28) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x840448}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="2400fdff2a120003adbd7000fddbb3023a28df2500000000", @ANYRES32=0x0, @ANYBLOB="0b000c000700fffff3fff2ff"], 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) [ 219.275717][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.279392][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 219.283161][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.291713][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x0, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b44, 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x9, r0, 0x2}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x81, 0x2, 0xbaa}) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0xcbf, 0x101001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x200, 0x200, 0x0, 0x3, 0x20, 0x9}, {0x1, 0x80000000, 0x8, 0x4, 0x1, 0x80}], ['\x00', '\x00', '\x00']}) ioctl$VT_ACTIVATE(r2, 0x5606, 0x8) 00:03:39 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1e}, "fccb3ddf50564a7a59096dd8cf136e38e7c9ea82832ad1b0dc262ec0d1a6"}, 0x22) syz_emit_vhci(0x0, 0x0) 00:03:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/247, 0xf7) (async) getdents64(r0, &(0x7f0000000180)=""/247, 0xf7) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000000)=0x5, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) [ 219.369777][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.372104][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 219.375312][ T5586] bt_err_ratelimited: 48 callbacks suppressed [ 219.375324][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 219.377068][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.381445][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 219.381899][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x0, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/247, 0xf7) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000000)=0x5, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 00:03:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 219.426768][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 219.458454][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.464685][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 219.467294][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 219.467618][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.473081][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 219.473530][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000734b00850619fbb7c75150926b000000006089f11608d291c1d332dbc8b006c8592f3a548e4dfae1c6783a178c9c9ab073d3949086efcf6b3212b7a8ef9af3e0edc2306e4be3b4889bfdf9910570b00ec8fc16ac294f2665d4fbec7cb85db1176db257109932d3970afd748dd7c8a7a2a7612b089c92764153e7ea969133e289ed2b0a38552243b7a59342f2f37509cc51aecfcc3d7bad7e5b7f2a2e3304dc03755b89605e41b16aba1801fcb842de4397964ede5516373cfd8a4b2be3a6fc26f5e0d84a0e6d4f97f508c4daefe3178fb7f3de59f7de7bdef0401ac5e0dcde47e3b4f9aa73161d13de639d442c77b3a301715be11253118f89cfee81a5c6857f60952ea0829699972634400e58f7db37be21ec07d2edcb099c30b5719ee003571ea67e87c81d1f1a4c3b9bb2d0c0b20a7e607d7777c1b409483c00000000000000000000000000000000281fb8b7131cc60d2289", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012f20b000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x450000, 0x4) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip_vti0\x00'}) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000104e8ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r13, @ANYBLOB="01"], 0x20}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x10, 0x0, {0x10, 0x0, 0x0, r10}}, 0x20}}, 0x0) 00:03:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b44, 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x9, r0, 0x2}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x81, 0x2, 0xbaa}) (async) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x81, 0x2, 0xbaa}) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0xcbf, 0x101001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x200, 0x200, 0x0, 0x3, 0x20, 0x9}, {0x1, 0x80000000, 0x8, 0x4, 0x1, 0x80}], ['\x00', '\x00', '\x00']}) (async) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x200, 0x200, 0x0, 0x3, 0x20, 0x9}, {0x1, 0x80000000, 0x8, 0x4, 0x1, 0x80}], ['\x00', '\x00', '\x00']}) ioctl$VT_ACTIVATE(r2, 0x5606, 0x8) 00:03:39 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1e}, "fccb3ddf50564a7a59096dd8cf136e38e7c9ea82832ad1b0dc262ec0d1a6"}, 0x22) syz_emit_vhci(0x0, 0x0) 00:03:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x0, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xa}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:39 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200), 0x10) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3, 0x3, 0x2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0x22, 0xff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2088000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x30, 0x49, 0x4, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x8, 0x0, r1, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c044}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) [ 219.618755][ T5586] Bluetooth: hci2: command 0x0409 tx timeout [ 219.624449][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.627128][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 219.629383][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 219.629433][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.633305][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 219.633355][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x0, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 219.654402][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b44, 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x9, r0, 0x2}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x81, 0x2, 0xbaa}) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0xcbf, 0x101001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) (async) close(r3) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x200, 0x200, 0x0, 0x3, 0x20, 0x9}, {0x1, 0x80000000, 0x8, 0x4, 0x1, 0x80}], ['\x00', '\x00', '\x00']}) (async) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x200, 0x200, 0x0, 0x3, 0x20, 0x9}, {0x1, 0x80000000, 0x8, 0x4, 0x1, 0x80}], ['\x00', '\x00', '\x00']}) ioctl$VT_ACTIVATE(r2, 0x5606, 0x8) [ 219.669581][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.672357][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 219.674740][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 219.675029][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.680361][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 219.680803][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x0, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:39 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1e}, "fccb3ddf50564a7a59096dd8cf136e38e7c9ea82832ad1b0dc262ec0d1a6"}, 0x22) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1e}, "fccb3ddf50564a7a59096dd8cf136e38e7c9ea82832ad1b0dc262ec0d1a6"}, 0x22) syz_emit_vhci(0x0, 0x0) 00:03:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 219.765684][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.768506][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 219.774421][ T6050] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 219.780666][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 219.780902][ T5586] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.784768][ T5586] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 219.784820][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:39 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x0, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:39 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x40}, [@IFLA_LINK={0x8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x30}}, 0x0) [ 219.831296][ T5586] Bluetooth: hci5: Ignoring connect complete event for invalid link type 00:03:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x0, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x2}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 219.837481][ T5586] Bluetooth: hci5: Ignoring connect complete event for invalid link type 00:03:39 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200), 0x10) (async) listen(r0, 0x0) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3, 0x3, 0x2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0x22, 0xff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2088000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x30, 0x49, 0x4, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x8, 0x0, r1, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c044}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:39 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) [ 219.887127][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type 00:03:39 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) (async) syz_emit_vhci(0x0, 0x0) (async) 00:03:39 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x40}, [@IFLA_LINK={0x8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x30}}, 0x0) [ 219.904216][ T6053] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.909671][ T6053] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 219.919571][ T6053] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 219.920448][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 219.927004][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 219.937107][ T5586] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:39 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200), 0x10) (async) listen(r0, 0x0) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3, 0x3, 0x2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0x22, 0xff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2088000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x30, 0x49, 0x4, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x8, 0x0, r1, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c044}, 0x10) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:03:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x0, 0x2}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:39 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x1, 0x6, 0x0, 0x0, 0x5}}}, 0x14) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) 00:03:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:39 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/247, 0xf7) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x701, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffb}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c091) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 00:03:39 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x40}, [@IFLA_LINK={0x8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x40}, [@IFLA_LINK={0x8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x30}}, 0x0) (async) 00:03:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x4}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 220.049995][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 220.052528][ T5586] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 220.054543][ T6053] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 220.060142][ T6053] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 220.062163][ T6053] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 220.068593][ T6053] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x5}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:40 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0xa41ea86fe4caf2f4) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5c}, "e861b86ae373b9c352db999e4b132a04102090a6135d5ab1a1ebc4e6b7d172983e8761cbee23c0d203242c400b201d73f53f9198c7b8825be9f2480b93b04690fecee0fe0721767fd8db80aa1f73b287383bbe0745a03601110fb8a1"}, 0x60) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) 00:03:40 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 220.138765][ T6053] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 220.140961][ T6053] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 220.142986][ T6053] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 220.145221][ T6053] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:40 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(0x0, 0xa41ea86fe4caf2f4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5c}, "e861b86ae373b9c352db999e4b132a04102090a6135d5ab1a1ebc4e6b7d172983e8761cbee23c0d203242c400b201d73f53f9198c7b8825be9f2480b93b04690fecee0fe0721767fd8db80aa1f73b287383bbe0745a03601110fb8a1"}, 0x60) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) 00:03:40 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 220.183910][ T6053] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 220.186747][ T6053] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 220.189735][ T6053] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 220.193564][ T6053] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x6}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:03:40 executing program 5: syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x20188c8, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=forget,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f7374726963742c7569643d666f726765742c756e686964652c696f636861727365743d6b6f69382d752c66696c657365743d30303030303030303030303030303030303030332c7569643d69676e6f72652c757466382c696f636861727365743d63703934ffffff7f00000000726765742c736d61636b6673666c6f6f723d7d295c2d242d5e2c2c00"], 0x5, 0xc10, &(0x7f00000039c0)="$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") 00:03:40 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) 00:03:40 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "0138077c89e498ce5447f16b5f140db04077a2e9e3904bbe26bc00233fb756b8228b67513811c09c73f2e5c60d0c024f9e1c972ea1dcadf8eeeccc67f17c642954120da9544af2d6efe6be795054999caf32b69093c12d0a8dab822a9f1c69563cce93a019cdd791190c940daff2c5145a918284ecfb54d463c33c282103eb2bdd7afa74e8564eed37401269833a69db81c711e996b1751aae80232d1ffc09368ebbc8bc6e33"}, 0xaa) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) [ 220.254933][ T8484] loop5: detected capacity change from 0 to 2048 [ 220.257390][ T8484] ======================================================= [ 220.257390][ T8484] WARNING: The mand mount option has been deprecated and [ 220.257390][ T8484] and is ignored by this kernel. Remove the mand [ 220.257390][ T8484] option from the mount to silence this warning. [ 220.257390][ T8484] ======================================================= [ 220.273486][ T6053] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 220.275608][ T6053] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 220.277688][ T6053] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 220.285869][ T6053] Bluetooth: hci1: ACL packet for unknown connection handle 201 00:03:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async, rerun: 64) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/247, 0xf7) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x701, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffb}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c091) (async, rerun: 32) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 00:03:40 executing program 4: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0xa41ea86fe4caf2f4) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5c}, "e861b86ae373b9c352db999e4b132a04102090a6135d5ab1a1ebc4e6b7d172983e8761cbee23c0d203242c400b201d73f53f9198c7b8825be9f2480b93b04690fecee0fe0721767fd8db80aa1f73b287383bbe0745a03601110fb8a1"}, 0x60) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(0x0, 0xa41ea86fe4caf2f4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5c}, "e861b86ae373b9c352db999e4b132a04102090a6135d5ab1a1ebc4e6b7d172983e8761cbee23c0d203242c400b201d73f53f9198c7b8825be9f2480b93b04690fecee0fe0721767fd8db80aa1f73b287383bbe0745a03601110fb8a1"}, 0x60) (async) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) 00:03:40 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x81, 0xc9, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6, 0x2, 0x2, 0x5, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x8, 0xc8, 0x2, 0x6, 0x1, 0x6}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xcc, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x72, 0x8000, 0x8001, 0x2}}]}}, 0x15) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x64, 0x1, 0x8, 0x4, 0x6}}}, 0x14) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8}, "24c958bd88878d8c"}, 0xc) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2e, 0xc9, 0xad, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x28}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x200, 0x0, 0x3b}}]}}, 0x18) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "05f1e03cff5d18dbde70de4428fe533796bf23f1f0fd9b8391c7689b9b4edac1a399a7c95700e7986c146ad76812ed51afdd510ffbd309b3edf16e0ac4cb0c5caae0da3bac80e8ef14e728baf4b4a7a4acee7ae7db628c4e3ff24b9e5c67d902f717ff71c35b5dbce1be092b25f7fe11e9ad79061b698171537e3f30e3be50988830a96baba5e55b1064f65821a6c6fe570198e10052274aac040cec5f852e7eb5c4a9d41859c0aeb0003298185df0b94f26120b570874a0d08a46c38279bbce2bab276e"}, 0xc8) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "d50c9c3fcdb1a66cde1f7dab03f07c68d867d3236f19f863200c2a16208e77c0cd071f8e0d236ccd50f087a3e63c300cbaec984ec3d79e828bf00405e22feeaeefd7ed5903ede654a80bb2ce569dbe7852ecd345f1da8184bfc98e1f73ebc53a6a4418e0673a6971cdbf2a8520fee51805b366096ed494e8cf5e8850b4aa32e5cff888875ad5b094d636dc4c283a2377ee107f2db58bd171140269ee736ecc7b64"}, 0xa5) syz_emit_vhci(&(0x7f00000005c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "22a5c69d33b2"}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}}}, 0xf) 00:03:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0,