1463d6901325cf13cd56f20506315ca9f32c53b42292baec47d378487af4b2ded13be229ae630cb0323d145887cca3304f0afceec37fd39fc1cca27b0aed0dc24"], 0xcd) 03:57:44 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043eff0000000000000000aaaaaaaaaa0000"], 0x1d) 03:57:44 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xf2}, "3d0917345ee557ff86511a02027b79ba02529307280707536a24b24cfdbc3cad71ca19e698a36b6cb614260b30ca8bce1aa973717e3d01b3ef449211bf2267133807d3fb2bd790a050753352234bf85d72afcc744fd2c0ef9d3f75f982b6041d2dd42e2f83c44eda94fa5eea76d99ccbd93be83311238d6f8f82841793e9c3ee64e1aca3f358e88b8cd3d042b580945731cebf2b39b929ea8ae3150393d0bc1ae6814be81bad4d338efb251a32f669509a34f3645fcd72536b5fe34089ee4ce53f86b209bd966b8a5146d0ef27e81d8c566d4d6ad1dde830602d92f7b622e021ddb47b1011fe47e5679e8687a03ef9548a75"}, 0xf6) 03:57:44 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x1, 0xc9, {0xff, 0x101, 0x6, 0x8, 0x81}}}}, 0x17) 03:57:44 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0d04d537e9e421ac76cc183dfd21f305ebfb7a30fe74994e62f355de922e5048458771e91f43df06c54fcc50e965205a"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xbec7edcf4fd8b44b}, 0x2) 03:57:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 81) 03:57:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x40, 0x4e23, 0x8, 0x2, 0x20, 0x20, 0x4, 0x0, 0xee00}, {0x401, 0x4, 0x7, 0x100000001, 0x7, 0x4, 0x3f, 0x9}, {0xffffffff80000001, 0x85, 0x6, 0x2}, 0x8, 0x6e6bbb, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d5, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x3506, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1}}, 0xe8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) 03:57:44 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043eff0000000000000000aaaaaaaaaa0000"], 0x1d) 03:57:44 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0c01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xd3) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfd}, "0d80d96214b2450cf638b0f7340c9680e59dbda2b7db76612209b2ca905f777a3f25575df294ab73bb83bc5ea2f866a9b71829e900b4152a08e9dc088e500a980954069e2e00f238ff1851ce25f0caee1b404e0984a28eeb6b2f4140f810c50044030bc3a79bc3db8a169d2777912ecf80efaed633a55027fd8d4f8394cc6447b8979e5c30c2b6fbca8d20b88bddfd1d54f6e121ed271111331cf5df3003091685a9af7ee5ebfb3f7b3389492264b5523ddd10764651e659df759aa717d1d140773a7708a6078741ff8f1bc21eaba5d7b352c494d53f72524a455ff189326a2051c53180bacbde7aa588b7066242930b5bd5529ed51f0f75d91a090049"}, 0x101) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 472.839058][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 472.869019][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:44 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x1, 0xc9, {0xff, 0x101, 0x6, 0x8, 0x81}}}}, 0x17) 03:57:44 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x1, 0xc9, {0xff, 0x101, 0x6, 0x8, 0x81}}}}, 0x17) [ 472.941519][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 472.941546][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d [ 472.970174][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 82) [ 473.017844][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 473.032927][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:45 executing program 2: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @mcast2, 0xfc}}, 0x594, 0xbf}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={r0, 0x5, 0x61, "78d2b49c90fa3e750c0424bbd3c0797a818f4ae8c61761b05efb64fa323d6407b784fd2bf5b9fdb7d6d9f2607aa4b1d1bd8a1299741fafa9fa9b2a1a1a0ac359f65f966937d54270fa6c92d10b61247b8ac2ad4b25c451579c9cb7b8fedb644cb1"}, 0x69) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={r0, 0x2}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x500, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) 03:57:45 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8}, "3fffa2f03335a681"}, 0xffffffcf) 03:57:45 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0c01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xd3) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfd}, "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"}, 0x101) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0c01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) (async) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xd3) (async) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfd}, "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"}, 0x101) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 03:57:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x8000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8c3e1d23f542d9aec4fcec7f0bf59429a01ef618440085fa207b02fad61957098a753b0a0db79b50bf3590603ef655042053c0bdffe61b016c0114f93cadf92aeabd58d1cf3313821cbe96c4f1f2ba7db94cdf263bfd962956a2685b7963e390231dcdaac49027de3fa3a6cea6b1d", 0x6f}, {&(0x7f0000000140)="e59d8c8e3523073aed01f7ac8d388b3e71d30ae967914ded9b869aa5495a01cfcfda8d2ca8e8dfed2a545d143270aeed80b1d3bc31f6dd7f0a9fd7f540a1cf6f0017d4f1ba4befc6f298c2774d1913deabcd00d329d09a2a7e88d3f71c9fc20c382dd0c393f5a87c197efdc8078be62073e9f741c8319890bf5188dde19f5f49a18881f6709c236f56e1a812ba0c", 0x8e}, {&(0x7f0000000200)="533cda8914ed00a0bf77d0601738ee58c09c77a0c2a6ad0d1463a078bf828b589df96f2dcd1219fc793b55096cfe21034917205a127f82f425c4f07b00081d073be5c8a55ed894985d47c71bd4ab800396d5e58e27f690fe332a3ce73027cb4ae10473945c6dd05fc9019479a43b6a50d5c222590b1c0c317f0c42cf378fc124a844906a4063f80fda6f4c45dc39", 0x8e}, {&(0x7f00000002c0)="cfe77a95230be81e3dd7219938f049b6a4c9d0a5f6a818383af8174a2dbc682bf8967e4f7689dc626ef7e9b9af77fafb26785adf940cadf62f9cccb3244946376e470ef78610df99e84b2ee73b0aec85a12f3dfb0f7516b2353f60212a02356fa5ecdbddfc50ee323f096856fa729a0b3f1c72b01d069bfbe56cf986b591f10f0ee6d7b398dcd2aee6f57b45f60c4b6761fb036f32b5c1cca4c0c858d67b6aa90fa2d5c5dbf3ccd5f39415a1031f2cefcaf25eb2e7333313ffd29214", 0xbc}, {&(0x7f0000000480)="c802854381f2a9a59a4ad23704988c5342ea037f7b76c557eef2837e8131162cce210cd336631e000c2b9605114c8e1af0b13bd764ff7613346e7193113dcbcd04a7a64180017548a2a54fdff4870fe4f7b0001f9c610c77383e697efc2d06e3ad767d2c65101d2ed0cf7832197b0a971474fb13614ab1f5c7cd8bf277489415868a5c9b6219810da5a2bdd557f2951d5021d5d85be42197793e31a630b60be57ab249181ce939c974c768b00e0faab4092cd7e2b85c07efc62880aa37c6fa8a6efdf9686176009e5d7232850c64605ef2e2", 0xd2}], 0x5) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1de6cba8fd0e190000009b25c8201f00029049817fdb0e5169e679e2dba5"], 0x20) 03:57:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x40, 0x4e23, 0x8, 0x2, 0x20, 0x20, 0x4, 0x0, 0xee00}, {0x401, 0x4, 0x7, 0x100000001, 0x7, 0x4, 0x3f, 0x9}, {0xffffffff80000001, 0x85, 0x6, 0x2}, 0x8, 0x6e6bbb, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d5, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x3506, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1}}, 0xe8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) pipe(&(0x7f0000000080)) (async) write(r0, &(0x7f0000000400)="fb", 0x1) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x40, 0x4e23, 0x8, 0x2, 0x20, 0x20, 0x4, 0x0, 0xee00}, {0x401, 0x4, 0x7, 0x100000001, 0x7, 0x4, 0x3f, 0x9}, {0xffffffff80000001, 0x85, 0x6, 0x2}, 0x8, 0x6e6bbb, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d5, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x3506, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1}}, 0xe8) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) 03:57:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 83) 03:57:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x40, 0x4e23, 0x8, 0x2, 0x20, 0x20, 0x4, 0x0, 0xee00}, {0x401, 0x4, 0x7, 0x100000001, 0x7, 0x4, 0x3f, 0x9}, {0xffffffff80000001, 0x85, 0x6, 0x2}, 0x8, 0x6e6bbb, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d5, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x3506, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1}}, 0xe8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) pipe(&(0x7f0000000080)) (async) write(r0, &(0x7f0000000400)="fb", 0x1) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x40, 0x4e23, 0x8, 0x2, 0x20, 0x20, 0x4, 0x0, 0xee00}, {0x401, 0x4, 0x7, 0x100000001, 0x7, 0x4, 0x3f, 0x9}, {0xffffffff80000001, 0x85, 0x6, 0x2}, 0x8, 0x6e6bbb, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d5, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x3506, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1}}, 0xe8) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) [ 473.742649][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:45 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0c01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xd3) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfd}, "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"}, 0x101) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:57:45 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8}, "3fffa2f03335a681"}, 0xffffffcf) 03:57:45 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8}, "3fffa2f03335a681"}, 0xffffffcf) [ 473.795313][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 473.833820][T12852] FAULT_INJECTION: forcing a failure. 03:57:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x8000) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8c3e1d23f542d9aec4fcec7f0bf59429a01ef618440085fa207b02fad61957098a753b0a0db79b50bf3590603ef655042053c0bdffe61b016c0114f93cadf92aeabd58d1cf3313821cbe96c4f1f2ba7db94cdf263bfd962956a2685b7963e390231dcdaac49027de3fa3a6cea6b1d", 0x6f}, {&(0x7f0000000140)="e59d8c8e3523073aed01f7ac8d388b3e71d30ae967914ded9b869aa5495a01cfcfda8d2ca8e8dfed2a545d143270aeed80b1d3bc31f6dd7f0a9fd7f540a1cf6f0017d4f1ba4befc6f298c2774d1913deabcd00d329d09a2a7e88d3f71c9fc20c382dd0c393f5a87c197efdc8078be62073e9f741c8319890bf5188dde19f5f49a18881f6709c236f56e1a812ba0c", 0x8e}, {&(0x7f0000000200)="533cda8914ed00a0bf77d0601738ee58c09c77a0c2a6ad0d1463a078bf828b589df96f2dcd1219fc793b55096cfe21034917205a127f82f425c4f07b00081d073be5c8a55ed894985d47c71bd4ab800396d5e58e27f690fe332a3ce73027cb4ae10473945c6dd05fc9019479a43b6a50d5c222590b1c0c317f0c42cf378fc124a844906a4063f80fda6f4c45dc39", 0x8e}, {&(0x7f00000002c0)="cfe77a95230be81e3dd7219938f049b6a4c9d0a5f6a818383af8174a2dbc682bf8967e4f7689dc626ef7e9b9af77fafb26785adf940cadf62f9cccb3244946376e470ef78610df99e84b2ee73b0aec85a12f3dfb0f7516b2353f60212a02356fa5ecdbddfc50ee323f096856fa729a0b3f1c72b01d069bfbe56cf986b591f10f0ee6d7b398dcd2aee6f57b45f60c4b6761fb036f32b5c1cca4c0c858d67b6aa90fa2d5c5dbf3ccd5f39415a1031f2cefcaf25eb2e7333313ffd29214", 0xbc}, {&(0x7f0000000480)="c802854381f2a9a59a4ad23704988c5342ea037f7b76c557eef2837e8131162cce210cd336631e000c2b9605114c8e1af0b13bd764ff7613346e7193113dcbcd04a7a64180017548a2a54fdff4870fe4f7b0001f9c610c77383e697efc2d06e3ad767d2c65101d2ed0cf7832197b0a971474fb13614ab1f5c7cd8bf277489415868a5c9b6219810da5a2bdd557f2951d5021d5d85be42197793e31a630b60be57ab249181ce939c974c768b00e0faab4092cd7e2b85c07efc62880aa37c6fa8a6efdf9686176009e5d7232850c64605ef2e2", 0xd2}], 0x5) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1de6cba8fd0e190000009b25c8201f00029049817fdb0e5169e679e2dba5"], 0x20) (rerun: 32) [ 473.833820][T12852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.852051][T12852] CPU: 1 PID: 12852 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 473.862493][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 473.872585][T12852] Call Trace: [ 473.872596][T12852] [ 473.872605][T12852] dump_stack_lvl+0xcd/0x134 [ 473.883384][T12852] should_fail.cold+0x5/0xa [ 473.887882][T12852] _copy_from_user+0x2a/0x170 [ 473.892567][T12852] copy_msghdr_from_user+0x89/0x150 [ 473.897782][T12852] ? __copy_msghdr+0x4a0/0x4a0 [ 473.902553][T12852] ? __lock_acquire+0x166e/0x56d0 [ 473.907618][T12852] ___sys_sendmsg+0xdd/0x1b0 [ 473.912201][T12852] ? do_recvmmsg+0x6e0/0x6e0 [ 473.916784][T12852] ? find_held_lock+0x2d/0x110 [ 473.921540][T12852] ? __might_fault+0xd1/0x170 [ 473.926207][T12852] ? lock_downgrade+0x6e0/0x6e0 [ 473.931151][T12852] __sys_sendmmsg+0x18b/0x460 [ 473.935817][T12852] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 473.940833][T12852] ? __ct_user_exit+0xff/0x150 [ 473.945605][T12852] ? lock_downgrade+0x6e0/0x6e0 [ 473.950458][T12852] ? lock_downgrade+0x6e0/0x6e0 [ 473.955301][T12852] ? syscall_enter_from_user_mode+0x22/0xb0 [ 473.961205][T12852] __x64_sys_sendmmsg+0x99/0x100 [ 473.966134][T12852] ? syscall_enter_from_user_mode+0x22/0xb0 [ 473.972031][T12852] do_syscall_64+0x35/0xb0 [ 473.976431][T12852] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 473.982323][T12852] RIP: 0033:0x7f8197a8a669 [ 473.986727][T12852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 474.006329][T12852] RSP: 002b:00007f8198c7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 474.014726][T12852] RAX: ffffffffffffffda RBX: 00007f8197babf80 RCX: 00007f8197a8a669 [ 474.022689][T12852] RDX: 03fffffffffffe36 RSI: 0000000020001e00 RDI: 0000000000000005 [ 474.030643][T12852] RBP: 00007f8198c7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 474.038596][T12852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:57:45 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0d048c8387be2c8ec755b848a9c542059b85e74c3cf7f9b9d3056afd8c6bcbf18a2ee10f8e18a934452c366adbc65f40c7175f2c8c1225f5dae47d3d597ec49eda11f2ed83eae1b1c228f556274a580ec613c369e9f5efbfff42a7aad1781f15173963a60992dcff0c0c9dfbef20e6401be42e74c9dd94233fb9bcb6a31950f445ab83ccafe21f03d6bc091c6aebda8787414fb65827657873857be58aaf6686979471852c82744825cc976f3064a8bd9f042c20ca41f89b1d4280f7f788f74561dd9408f260a96e3aca2ad8a9cc02a5fdec802e02a9beb8"], 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x24}, @l2cap_cid_le_signaling={{0x20}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x1c}, {0x4, 0x7ce, 0x876, 0xd70b, [0x6, 0x1ff, 0x1, 0x400, 0x1ff, 0x8, 0x7f, 0x3, 0x8000, 0x9]}}}}, 0x29) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x101, 0x3ff, 0x1, 0x7f}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2f}, "4b2d4c06eca0075dfe0e5e232d122b5df31c83a3ba6b3380a4138a7ae25ab53f96f8ab7b29398c5719c82a232fc11e"}, 0x33) [ 474.046552][T12852] R13: 00007f81980dfb1f R14: 00007f8198c7b300 R15: 0000000000022000 [ 474.054516][T12852] [ 474.130632][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 474.130662][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d [ 474.183089][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:46 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ff07000000ff0000000000000000aad80e69572599"], 0x1d) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x89}, @l2cap_cid_signaling={{0x85}, [@l2cap_conf_rsp={{0x5, 0x27, 0x24}, {0x9, 0x7, 0x80, [@l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}, @l2cap_conf_rsp={{0x5, 0x1, 0x43}, {0x0, 0xada8, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0xc1, 0x0, 0x2, 0x80000000, 0x6, 0xffff}}, @l2cap_conf_efs={0x6, 0x10, {0x20, 0x1, 0x7, 0x62, 0x821, 0x19f4}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0x9, 0x9, 0x8}}]}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x4, 0x7f}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x4}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1000, 0x20}}]}}, 0x8e) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0xff}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0x8}, {0xba, 0xeb4, 0x3, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="03c90005000000c37d0af09440c45bacf1e8927148050fd63a838b7f20982fca1300fce2241ebe5172c2d2b92ac164d5f1be635e4c4bfb3da8a9a1924265cc6a614391ae08e14e2f830b6c2f6531a2d5c30df2de3639fb70bf05eeeacd03621b30853a0b5004a2637e33073ff6f5c1c4c8b04067404a3d5e3ed194ec1db0c585f9eda2c34c99de14ca82c74f7641938075e7"], 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc9, 0x81}, {0xc8, 0xa3c}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc4}, @l2cap_cid_signaling={{0xc0}, [@l2cap_conf_req={{0x4, 0x8, 0x5b}, {0x0, 0x2, [@l2cap_conf_efs={0x6, 0x10, {0x8a, 0x0, 0x4, 0x1ff, 0x4, 0xfffff461}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x4, 0x4, 0x4, 0x5, 0x8000}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x5, 0x7f, 0x2, 0x7f, 0xdef}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x20, 0x20, 0xffc0, 0x200, 0x1}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x7, 0x80, 0x6, 0xd, 0xfff8}}, @l2cap_conf_flushto={0x2, 0x2, 0x7fff}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x2, 0x100, 0x200, 0x80000000, 0x78c}}]}}, @l2cap_conf_rsp={{0x5, 0x7, 0x2a}, {0x9f2, 0x3, 0x26, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x1f}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x38}, @l2cap_conf_efs={0x6, 0x10, {0x1f, 0x2, 0x9, 0x7fffffff, 0x5a82, 0x993}}]}}, @l2cap_create_chan_req={{0xc, 0x4e, 0x5}, {0xf801, 0x1, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x9, 0x7b, 0xa77, 0x4}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x0, 0x8}}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x1}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x8, 0x3}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x0, 0x5}}]}}, 0xc9) 03:57:46 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x8000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8c3e1d23f542d9aec4fcec7f0bf59429a01ef618440085fa207b02fad61957098a753b0a0db79b50bf3590603ef655042053c0bdffe61b016c0114f93cadf92aeabd58d1cf3313821cbe96c4f1f2ba7db94cdf263bfd962956a2685b7963e390231dcdaac49027de3fa3a6cea6b1d", 0x6f}, {&(0x7f0000000140)="e59d8c8e3523073aed01f7ac8d388b3e71d30ae967914ded9b869aa5495a01cfcfda8d2ca8e8dfed2a545d143270aeed80b1d3bc31f6dd7f0a9fd7f540a1cf6f0017d4f1ba4befc6f298c2774d1913deabcd00d329d09a2a7e88d3f71c9fc20c382dd0c393f5a87c197efdc8078be62073e9f741c8319890bf5188dde19f5f49a18881f6709c236f56e1a812ba0c", 0x8e}, {&(0x7f0000000200)="533cda8914ed00a0bf77d0601738ee58c09c77a0c2a6ad0d1463a078bf828b589df96f2dcd1219fc793b55096cfe21034917205a127f82f425c4f07b00081d073be5c8a55ed894985d47c71bd4ab800396d5e58e27f690fe332a3ce73027cb4ae10473945c6dd05fc9019479a43b6a50d5c222590b1c0c317f0c42cf378fc124a844906a4063f80fda6f4c45dc39", 0x8e}, {&(0x7f00000002c0)="cfe77a95230be81e3dd7219938f049b6a4c9d0a5f6a818383af8174a2dbc682bf8967e4f7689dc626ef7e9b9af77fafb26785adf940cadf62f9cccb3244946376e470ef78610df99e84b2ee73b0aec85a12f3dfb0f7516b2353f60212a02356fa5ecdbddfc50ee323f096856fa729a0b3f1c72b01d069bfbe56cf986b591f10f0ee6d7b398dcd2aee6f57b45f60c4b6761fb036f32b5c1cca4c0c858d67b6aa90fa2d5c5dbf3ccd5f39415a1031f2cefcaf25eb2e7333313ffd29214", 0xbc}, {&(0x7f0000000480)="c802854381f2a9a59a4ad23704988c5342ea037f7b76c557eef2837e8131162cce210cd336631e000c2b9605114c8e1af0b13bd764ff7613346e7193113dcbcd04a7a64180017548a2a54fdff4870fe4f7b0001f9c610c77383e697efc2d06e3ad767d2c65101d2ed0cf7832197b0a971474fb13614ab1f5c7cd8bf277489415868a5c9b6219810da5a2bdd557f2951d5021d5d85be42197793e31a630b60be57ab249181ce939c974c768b00e0faab4092cd7e2b85c07efc62880aa37c6fa8a6efdf9686176009e5d7232850c64605ef2e2", 0xd2}], 0x5) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1de6cba8fd0e190000009b25c8201f00029049817fdb0e5169e679e2dba5"], 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x8000) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) writev(r2, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8c3e1d23f542d9aec4fcec7f0bf59429a01ef618440085fa207b02fad61957098a753b0a0db79b50bf3590603ef655042053c0bdffe61b016c0114f93cadf92aeabd58d1cf3313821cbe96c4f1f2ba7db94cdf263bfd962956a2685b7963e390231dcdaac49027de3fa3a6cea6b1d", 0x6f}, {&(0x7f0000000140)="e59d8c8e3523073aed01f7ac8d388b3e71d30ae967914ded9b869aa5495a01cfcfda8d2ca8e8dfed2a545d143270aeed80b1d3bc31f6dd7f0a9fd7f540a1cf6f0017d4f1ba4befc6f298c2774d1913deabcd00d329d09a2a7e88d3f71c9fc20c382dd0c393f5a87c197efdc8078be62073e9f741c8319890bf5188dde19f5f49a18881f6709c236f56e1a812ba0c", 0x8e}, {&(0x7f0000000200)="533cda8914ed00a0bf77d0601738ee58c09c77a0c2a6ad0d1463a078bf828b589df96f2dcd1219fc793b55096cfe21034917205a127f82f425c4f07b00081d073be5c8a55ed894985d47c71bd4ab800396d5e58e27f690fe332a3ce73027cb4ae10473945c6dd05fc9019479a43b6a50d5c222590b1c0c317f0c42cf378fc124a844906a4063f80fda6f4c45dc39", 0x8e}, {&(0x7f00000002c0)="cfe77a95230be81e3dd7219938f049b6a4c9d0a5f6a818383af8174a2dbc682bf8967e4f7689dc626ef7e9b9af77fafb26785adf940cadf62f9cccb3244946376e470ef78610df99e84b2ee73b0aec85a12f3dfb0f7516b2353f60212a02356fa5ecdbddfc50ee323f096856fa729a0b3f1c72b01d069bfbe56cf986b591f10f0ee6d7b398dcd2aee6f57b45f60c4b6761fb036f32b5c1cca4c0c858d67b6aa90fa2d5c5dbf3ccd5f39415a1031f2cefcaf25eb2e7333313ffd29214", 0xbc}, {&(0x7f0000000480)="c802854381f2a9a59a4ad23704988c5342ea037f7b76c557eef2837e8131162cce210cd336631e000c2b9605114c8e1af0b13bd764ff7613346e7193113dcbcd04a7a64180017548a2a54fdff4870fe4f7b0001f9c610c77383e697efc2d06e3ad767d2c65101d2ed0cf7832197b0a971474fb13614ab1f5c7cd8bf277489415868a5c9b6219810da5a2bdd557f2951d5021d5d85be42197793e31a630b60be57ab249181ce939c974c768b00e0faab4092cd7e2b85c07efc62880aa37c6fa8a6efdf9686176009e5d7232850c64605ef2e2", 0xd2}], 0x5) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1de6cba8fd0e190000009b25c8201f00029049817fdb0e5169e679e2dba5"], 0x20) (async) 03:57:46 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0d048c8387be2c8ec755b848a9c542059b85e74c3cf7f9b9d3056afd8c6bcbf18a2ee10f8e18a934452c366adbc65f40c7175f2c8c1225f5dae47d3d597ec49eda11f2ed83eae1b1c228f556274a580ec613c369e9f5efbfff42a7aad1781f15173963a60992dcff0c0c9dfbef20e6401be42e74c9dd94233fb9bcb6a31950f445ab83ccafe21f03d6bc091c6aebda8787414fb65827657873857be58aaf6686979471852c82744825cc976f3064a8bd9f042c20ca41f89b1d4280f7f788f74561dd9408f260a96e3aca2ad8a9cc02a5fdec802e02a9beb8"], 0x10) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x24}, @l2cap_cid_le_signaling={{0x20}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x1c}, {0x4, 0x7ce, 0x876, 0xd70b, [0x6, 0x1ff, 0x1, 0x400, 0x1ff, 0x8, 0x7f, 0x3, 0x8000, 0x9]}}}}, 0x29) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x101, 0x3ff, 0x1, 0x7f}}]}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2f}, "4b2d4c06eca0075dfe0e5e232d122b5df31c83a3ba6b3380a4138a7ae25ab53f96f8ab7b29398c5719c82a232fc11e"}, 0x33) 03:57:46 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac580000000000000002bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481913f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x6b}, "bdb2c39c048496a93c8ad55bdd2dc5b94845456410be6bd97c089e45bbb2bac403464c34ffbce63b35ceb617e5e0710f2a907e2c03496c2251c11a5a3b9cb247b32f07aea6cb331b5f4433c7b9921bf54d65102d5af329310333a423cd14c281dad3c5ff7ef0d1b0113216"}, 0x6f) 03:57:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 84) [ 474.636793][ T3662] Bluetooth: hci3: Malformed LE Event: 0x0d [ 474.643758][ T3662] Bluetooth: Unexpected continuation frame (len 137) [ 474.650870][ T3658] Bluetooth: hci3: hardware error 0xff 03:57:46 executing program 2: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @mcast2, 0xfc}}, 0x594, 0xbf}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={r0, 0x5, 0x61, "78d2b49c90fa3e750c0424bbd3c0797a818f4ae8c61761b05efb64fa323d6407b784fd2bf5b9fdb7d6d9f2607aa4b1d1bd8a1299741fafa9fa9b2a1a1a0ac359f65f966937d54270fa6c92d10b61247b8ac2ad4b25c451579c9cb7b8fedb644cb1"}, 0x69) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={r0, 0x2}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000200)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000400)={r0, 0x1, 0x1ff}, &(0x7f0000000440)=0x8) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dcdde67796b5709d72d7c2c120f8158cfbca9ae71dc5b9659a3bb07bb0800cee6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781fffa94600000000000000de49191a81a4b7c49553f87cffffcc3282138e194c08dd6481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef84865b76a62103207c36832bc97571463d6901325cf13cd56f20506315ca9f32c53b42292baec47d378487af4b2ded13be229ae630cb0323d145887cca3304f0afceec37fd39fc1cca27b0aed0dc24"], 0xcd) 03:57:46 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ff07000000ff0000000000000000aad80e69572599"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x89}, @l2cap_cid_signaling={{0x85}, [@l2cap_conf_rsp={{0x5, 0x27, 0x24}, {0x9, 0x7, 0x80, [@l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}, @l2cap_conf_rsp={{0x5, 0x1, 0x43}, {0x0, 0xada8, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0xc1, 0x0, 0x2, 0x80000000, 0x6, 0xffff}}, @l2cap_conf_efs={0x6, 0x10, {0x20, 0x1, 0x7, 0x62, 0x821, 0x19f4}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0x9, 0x9, 0x8}}]}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x4, 0x7f}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x4}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1000, 0x20}}]}}, 0x8e) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0xff}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0x8}, {0xba, 0xeb4, 0x3, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="03c90005000000c37d0af09440c45bacf1e8927148050fd63a838b7f20982fca1300fce2241ebe5172c2d2b92ac164d5f1be635e4c4bfb3da8a9a1924265cc6a614391ae08e14e2f830b6c2f6531a2d5c30df2de3639fb70bf05eeeacd03621b30853a0b5004a2637e33073ff6f5c1c4c8b04067404a3d5e3ed194ec1db0c585f9eda2c34c99de14ca82c74f7641938075e7"], 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc9, 0x81}, {0xc8, 0xa3c}]}}}, 0xc) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc4}, @l2cap_cid_signaling={{0xc0}, [@l2cap_conf_req={{0x4, 0x8, 0x5b}, {0x0, 0x2, [@l2cap_conf_efs={0x6, 0x10, {0x8a, 0x0, 0x4, 0x1ff, 0x4, 0xfffff461}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x4, 0x4, 0x4, 0x5, 0x8000}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x5, 0x7f, 0x2, 0x7f, 0xdef}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x20, 0x20, 0xffc0, 0x200, 0x1}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x7, 0x80, 0x6, 0xd, 0xfff8}}, @l2cap_conf_flushto={0x2, 0x2, 0x7fff}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x2, 0x100, 0x200, 0x80000000, 0x78c}}]}}, @l2cap_conf_rsp={{0x5, 0x7, 0x2a}, {0x9f2, 0x3, 0x26, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x1f}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x38}, @l2cap_conf_efs={0x6, 0x10, {0x1f, 0x2, 0x9, 0x7fffffff, 0x5a82, 0x993}}]}}, @l2cap_create_chan_req={{0xc, 0x4e, 0x5}, {0xf801, 0x1, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x9, 0x7b, 0xa77, 0x4}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x0, 0x8}}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x1}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x8, 0x3}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x0, 0x5}}]}}, 0xc9) 03:57:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 85) 03:57:46 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b320352e0e99cddc7f6200"/32], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x13a}, @l2cap_cid_signaling={{0x136}, [@l2cap_info_rsp={{0xb, 0xbd, 0x6d}, {0xff42, 0x6, "1d6babea70f2f04cefba8bc5252883d9ba8f6b43010d8ab4253d4edae54f5f983c623402033350d832110c4e57e7f39bd724ea719b2f4507b3cc4c05191599d2906ac1238a758aa5badc3e27162c5f3fa275269aa5c877e7e7210ad99a366fe62f64491d6d83cce05a"}}, @l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x1000, 0xdbae, 0x7, 0x769}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0xfff7, 0x20}}, @l2cap_info_req={{0xa, 0x1e, 0x2}, {0x1000}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x0, 0x3}}, @l2cap_info_req={{0xa, 0xc9, 0x2}, {0xc82}}, @l2cap_disconn_req={{0x6, 0xa7, 0x4}, {0xeb0, 0x1}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x9166, 0xfff7}}, @l2cap_info_rsp={{0xb, 0x5, 0x8a}, {0x7, 0x2, "b0e7cb59ebac88bd39fb481f4094b7e90e4ef67a3f320d54405012e6f0e07c3e57adeabefbf8dbe9507d7b57c31a7d7733c3c81314b6d81c358cd077d60623603fa2246fbe368b1b069aaab7fee187010d0a390fcdf7c2ba331d63a2c5bb17c8cd90bd5bba9ddb844e3226f3a7cbbcf54609f3f4413db9377b12c5695b69fc9ebc92960e3205"}}]}}, 0x13f) 03:57:46 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac580000000000000002bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481913f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x6b}, "bdb2c39c048496a93c8ad55bdd2dc5b94845456410be6bd97c089e45bbb2bac403464c34ffbce63b35ceb617e5e0710f2a907e2c03496c2251c11a5a3b9cb247b32f07aea6cb331b5f4433c7b9921bf54d65102d5af329310333a423cd14c281dad3c5ff7ef0d1b0113216"}, 0x6f) [ 474.733493][ T3647] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 474.754994][ T3647] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 474.755021][ T3647] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:46 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ff07000000ff0000000000000000aad80e69572599"], 0x1d) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x89}, @l2cap_cid_signaling={{0x85}, [@l2cap_conf_rsp={{0x5, 0x27, 0x24}, {0x9, 0x7, 0x80, [@l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}, @l2cap_conf_rsp={{0x5, 0x1, 0x43}, {0x0, 0xada8, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0xc1, 0x0, 0x2, 0x80000000, 0x6, 0xffff}}, @l2cap_conf_efs={0x6, 0x10, {0x20, 0x1, 0x7, 0x62, 0x821, 0x19f4}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0x9, 0x9, 0x8}}]}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x4, 0x7f}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x4}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1000, 0x20}}]}}, 0x8e) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0xff}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0x8}, {0xba, 0xeb4, 0x3, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="03c90005000000c37d0af09440c45bacf1e8927148050fd63a838b7f20982fca1300fce2241ebe5172c2d2b92ac164d5f1be635e4c4bfb3da8a9a1924265cc6a614391ae08e14e2f830b6c2f6531a2d5c30df2de3639fb70bf05eeeacd03621b30853a0b5004a2637e33073ff6f5c1c4c8b04067404a3d5e3ed194ec1db0c585f9eda2c34c99de14ca82c74f7641938075e7"], 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc9, 0x81}, {0xc8, 0xa3c}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc4}, @l2cap_cid_signaling={{0xc0}, [@l2cap_conf_req={{0x4, 0x8, 0x5b}, {0x0, 0x2, [@l2cap_conf_efs={0x6, 0x10, {0x8a, 0x0, 0x4, 0x1ff, 0x4, 0xfffff461}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x4, 0x4, 0x4, 0x5, 0x8000}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x5, 0x7f, 0x2, 0x7f, 0xdef}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x20, 0x20, 0xffc0, 0x200, 0x1}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x7, 0x80, 0x6, 0xd, 0xfff8}}, @l2cap_conf_flushto={0x2, 0x2, 0x7fff}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x2, 0x100, 0x200, 0x80000000, 0x78c}}]}}, @l2cap_conf_rsp={{0x5, 0x7, 0x2a}, {0x9f2, 0x3, 0x26, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x1f}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x38}, @l2cap_conf_efs={0x6, 0x10, {0x1f, 0x2, 0x9, 0x7fffffff, 0x5a82, 0x993}}]}}, @l2cap_create_chan_req={{0xc, 0x4e, 0x5}, {0xf801, 0x1, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x9, 0x7b, 0xa77, 0x4}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x0, 0x8}}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x1}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x8, 0x3}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x0, 0x5}}]}}, 0xc9) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ff07000000ff0000000000000000aad80e69572599"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x89}, @l2cap_cid_signaling={{0x85}, [@l2cap_conf_rsp={{0x5, 0x27, 0x24}, {0x9, 0x7, 0x80, [@l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}, @l2cap_conf_rsp={{0x5, 0x1, 0x43}, {0x0, 0xada8, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0xc1, 0x0, 0x2, 0x80000000, 0x6, 0xffff}}, @l2cap_conf_efs={0x6, 0x10, {0x20, 0x1, 0x7, 0x62, 0x821, 0x19f4}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0x9, 0x9, 0x8}}]}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x4, 0x7f}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x4}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1000, 0x20}}]}}, 0x8e) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0xff}}}, 0x4) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0x8}, {0xba, 0xeb4, 0x3, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="03c90005000000c37d0af09440c45bacf1e8927148050fd63a838b7f20982fca1300fce2241ebe5172c2d2b92ac164d5f1be635e4c4bfb3da8a9a1924265cc6a614391ae08e14e2f830b6c2f6531a2d5c30df2de3639fb70bf05eeeacd03621b30853a0b5004a2637e33073ff6f5c1c4c8b04067404a3d5e3ed194ec1db0c585f9eda2c34c99de14ca82c74f7641938075e7"], 0xd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc9, 0x81}, {0xc8, 0xa3c}]}}}, 0xc) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc4}, @l2cap_cid_signaling={{0xc0}, [@l2cap_conf_req={{0x4, 0x8, 0x5b}, {0x0, 0x2, [@l2cap_conf_efs={0x6, 0x10, {0x8a, 0x0, 0x4, 0x1ff, 0x4, 0xfffff461}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x4, 0x4, 0x4, 0x5, 0x8000}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x5, 0x7f, 0x2, 0x7f, 0xdef}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x20, 0x20, 0xffc0, 0x200, 0x1}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x7, 0x80, 0x6, 0xd, 0xfff8}}, @l2cap_conf_flushto={0x2, 0x2, 0x7fff}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x2, 0x100, 0x200, 0x80000000, 0x78c}}]}}, @l2cap_conf_rsp={{0x5, 0x7, 0x2a}, {0x9f2, 0x3, 0x26, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x1f}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x38}, @l2cap_conf_efs={0x6, 0x10, {0x1f, 0x2, 0x9, 0x7fffffff, 0x5a82, 0x993}}]}}, @l2cap_create_chan_req={{0xc, 0x4e, 0x5}, {0xf801, 0x1, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x9, 0x7b, 0xa77, 0x4}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x0, 0x8}}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x1}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x8, 0x3}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x0, 0x5}}]}}, 0xc9) (async) 03:57:46 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0d048c8387be2c8ec755b848a9c542059b85e74c3cf7f9b9d3056afd8c6bcbf18a2ee10f8e18a934452c366adbc65f40c7175f2c8c1225f5dae47d3d597ec49eda11f2ed83eae1b1c228f556274a580ec613c369e9f5efbfff42a7aad1781f15173963a60992dcff0c0c9dfbef20e6401be42e74c9dd94233fb9bcb6a31950f445ab83ccafe21f03d6bc091c6aebda8787414fb65827657873857be58aaf6686979471852c82744825cc976f3064a8bd9f042c20ca41f89b1d4280f7f788f74561dd9408f260a96e3aca2ad8a9cc02a5fdec802e02a9beb8"], 0x10) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x24}, @l2cap_cid_le_signaling={{0x20}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x1c}, {0x4, 0x7ce, 0x876, 0xd70b, [0x6, 0x1ff, 0x1, 0x400, 0x1ff, 0x8, 0x7f, 0x3, 0x8000, 0x9]}}}}, 0x29) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x101, 0x3ff, 0x1, 0x7f}}]}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2f}, "4b2d4c06eca0075dfe0e5e232d122b5df31c83a3ba6b3380a4138a7ae25ab53f96f8ab7b29398c5719c82a232fc11e"}, 0x33) [ 474.820291][ T3647] Bluetooth: hci3: Malformed LE Event: 0x0d 03:57:46 executing program 2: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @mcast2, 0xfc}}, 0x594, 0xbf}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={r0, 0x5, 0x61, "78d2b49c90fa3e750c0424bbd3c0797a818f4ae8c61761b05efb64fa323d6407b784fd2bf5b9fdb7d6d9f2607aa4b1d1bd8a1299741fafa9fa9b2a1a1a0ac359f65f966937d54270fa6c92d10b61247b8ac2ad4b25c451579c9cb7b8fedb644cb1"}, 0x69) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={r0, 0x2}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={r0, 0x1, 0x1ff}, &(0x7f0000000440)=0x8) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) 03:57:46 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b320352e0e99cddc7f6200"/32], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x13a}, @l2cap_cid_signaling={{0x136}, [@l2cap_info_rsp={{0xb, 0xbd, 0x6d}, {0xff42, 0x6, "1d6babea70f2f04cefba8bc5252883d9ba8f6b43010d8ab4253d4edae54f5f983c623402033350d832110c4e57e7f39bd724ea719b2f4507b3cc4c05191599d2906ac1238a758aa5badc3e27162c5f3fa275269aa5c877e7e7210ad99a366fe62f64491d6d83cce05a"}}, @l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x1000, 0xdbae, 0x7, 0x769}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0xfff7, 0x20}}, @l2cap_info_req={{0xa, 0x1e, 0x2}, {0x1000}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x0, 0x3}}, @l2cap_info_req={{0xa, 0xc9, 0x2}, {0xc82}}, @l2cap_disconn_req={{0x6, 0xa7, 0x4}, {0xeb0, 0x1}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x9166, 0xfff7}}, @l2cap_info_rsp={{0xb, 0x5, 0x8a}, {0x7, 0x2, "b0e7cb59ebac88bd39fb481f4094b7e90e4ef67a3f320d54405012e6f0e07c3e57adeabefbf8dbe9507d7b57c31a7d7733c3c81314b6d81c358cd077d60623603fa2246fbe368b1b069aaab7fee187010d0a390fcdf7c2ba331d63a2c5bb17c8cd90bd5bba9ddb844e3226f3a7cbbcf54609f3f4413db9377b12c5695b69fc9ebc92960e3205"}}]}}, 0x13f) [ 474.861251][ T3647] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 474.886566][ T3647] Bluetooth: hci3: Malformed LE Event: 0x0d [ 474.900692][ T3647] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:46 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac580000000000000002bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481913f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x6b}, "bdb2c39c048496a93c8ad55bdd2dc5b94845456410be6bd97c089e45bbb2bac403464c34ffbce63b35ceb617e5e0710f2a907e2c03496c2251c11a5a3b9cb247b32f07aea6cb331b5f4433c7b9921bf54d65102d5af329310333a423cd14c281dad3c5ff7ef0d1b0113216"}, 0x6f) 03:57:46 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002480)={&(0x7f0000000080)=@newtaction={0x23e4, 0x30, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{0x94, 0x1, [@m_skbedit={0x90, 0xf, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x5c, 0x6, "02fb423166ef271e8c9946861685a887194475e9d0213b86760e9c269a949b5689a6c3ba3621a81b4400eb33905f908190d7a24eddb200dc825eb0aa3b8bd8bce6dde0f4c555653b6952365e90d96e7d1b97efbd24d3691b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x18fc, 0x1, [@m_csum={0xe4, 0x1e, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x0, 0xfffffffe, 0x10000}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2a87719c, 0x8, 0x8, 0x100, 0x9}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x3, 0x2, 0x419, 0x7}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0xffffffffffffffff, 0x4e, 0x6}, 0x1d}}]}, {0x46, 0x6, "22c792f3cb9b63723079c85f7f70d93bf80f89ab6f003f42af856793ab6a479eda630a9fff6093b33e3459625bd95004cbc200e7a8e3bc5be3c54064872c55380ad6"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x11c, 0x15, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x200}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xd8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3ff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffd}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0xbe, 0x6, "4c36b334a867097867b00d97da8332a6d32693995a0dcabff75239f27b46d6f78f429bf89d4b0172fd696e301f8190c41be4a21a0dc14633b6082612a7ca5120df1905fa5744f283db1dc38fc939c4ebabab30c6f15fdb7706a1bb50461b924f0e6e0f80378ba3875df2df051be7e4ff9ade74a267609e890c443878fd3fefa544b5921f1628eebcbf5fec1886d4ecb539768ac94b016f90640986fe2e8b4474273b2a34a868dcaf1972461b38579f1275a63fb4cdf202ad70c1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x78, 0x14, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x3, 0x0, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0x25, 0x6, "49fbeec775b1e79a6d32864cc79838d8b9444306108805fa62ba9e3d39a686e626"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0xc4, 0x1b, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2a, 0x0, 0xfffffffffffffff3, 0x5, 0x200}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x9, 0x7, 0x1, 0x8000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x46, 0x6, "473b7f1b65fd91cfb297ffe1515c7bc5d3bcf2937aa801be538cfc57921b223b0e700f76d909c0d4fd7d61c0fd0488c9da3aba15edb1d4b0bf53e629525ef361b3ca"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}, @m_police={0x46c, 0x1f, 0x0, 0x0, {{0xb}, {0x420, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x3f, 0x10000, 0x3b, 0x526a, 0x8, 0xfffffffe, 0x1000, 0x15, 0x1, 0x7, 0x614d5a4b, 0xfff, 0x5, 0x2, 0x8, 0x40, 0xd0f, 0x6, 0x1304000, 0x1, 0x7, 0x5, 0x7f, 0x7, 0x0, 0x7ff, 0x5, 0x400, 0x0, 0x20, 0x1, 0xd20, 0x9, 0x7ff, 0x724c, 0x80000000, 0x800, 0x80000000, 0x80, 0x8a, 0x3, 0x3, 0x1, 0x3, 0x7, 0x4, 0xffff, 0xfffffffe, 0x2, 0x4, 0x20, 0x7, 0x9, 0x5, 0x2, 0x366357aa, 0xffffffc0, 0x44, 0x401, 0x1000, 0x515, 0xff, 0x8000, 0xffff, 0x9, 0x80000000, 0x3, 0x6, 0x6, 0x2400000, 0x9, 0x2, 0x1, 0x3, 0x7, 0x100, 0xffff, 0x43f, 0xffff, 0x0, 0x957, 0x20, 0x5, 0x9bed, 0xcb19, 0x6, 0xb0e, 0x1, 0x1f, 0x787e4a88, 0x5, 0x0, 0x0, 0x27, 0x7, 0x8000, 0x4, 0xa00000, 0x8000, 0x5, 0x3ff, 0x6213, 0x400, 0x80000000, 0x1, 0x40, 0x2c9, 0xffff0001, 0x3, 0x3, 0x7, 0xda47, 0x6, 0x7, 0x7f, 0x6, 0x1, 0xbc7, 0x0, 0x5ca6, 0x7, 0x5, 0x7, 0xfffffffb, 0x9, 0x4, 0x1, 0x4, 0x2, 0x2, 0x9, 0x6, 0x7ff, 0xffffff01, 0x3, 0x6, 0x200, 0x20, 0x2, 0x1, 0x3, 0xcb, 0xed, 0x3f, 0x7fffffff, 0x6, 0x8, 0x3, 0x6, 0x3, 0x0, 0x100, 0x6, 0x2, 0x1, 0x0, 0x0, 0x8846, 0x401, 0x7fffffff, 0x10001, 0xfff, 0x8, 0xfffffff8, 0x5, 0x10001, 0x2, 0x2, 0x4, 0x4, 0x4, 0x6, 0x3a, 0x0, 0x1000, 0x0, 0x5, 0x20, 0xfff, 0x3, 0x6, 0x8000, 0x6, 0x1f, 0x6, 0xfe1, 0xfff, 0x7, 0x4, 0x1fe, 0x1, 0xfffffc64, 0x5, 0x200, 0x0, 0x3, 0x1, 0x9, 0x9, 0x6, 0x7, 0x1, 0x2, 0x8, 0x7, 0x6, 0x200, 0x4, 0xfffffffc, 0x1, 0x7, 0x2118, 0xe2, 0xffffffc0, 0x5a29, 0x2, 0x8, 0x2, 0x1, 0x7, 0x1, 0x0, 0xe95, 0xffffffff, 0x0, 0xfff, 0xb0, 0xb89, 0xb688, 0x1000, 0x1, 0x401, 0x4, 0x976, 0x9, 0x80000001, 0xec, 0x1, 0x8000, 0x5, 0x8, 0x6, 0x10000, 0x20, 0xe850, 0x4, 0x5, 0x80000001, 0x200, 0xffffffff, 0x5, 0x8, 0x3ff, 0x70f, 0xfffffff8]}]]}, {0x22, 0x6, "b8968f062ae027b40019d16f217048dfae1fe8f01e9c78016eb0522d63de"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x1048, 0x8, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x108, 0x19, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xc9, 0x20000000, 0x10000, 0x20}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x3e8838a1, 0x5, 0x80000000, 0xa5}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa2, 0x713c47ef, 0x6, 0x10001, 0x20}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7fffffff, 0x20000000, 0x40, 0x8}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x10000000, 0x7, 0x3}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x6ed2, 0x5, 0x6788, 0x4}, 0x4c}}]}, {0x34, 0x6, "5e44aa312d000deafa99cead9e3ca85c478c129909396befad61bb781e71ad2dba8c792afc4d49b645a44ad407abaf69"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5}}}}]}, {0x12c, 0x1, [@m_skbedit={0x128, 0xe, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1f}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}]}, {0xe3, 0x6, "51ae4166309b7911dfbd44a6d5fa7a4110dd606f9c860f80de2ff28be6ed4d19f47b8c0065dac8022334f3225beb3634f4aaad21203fad3d96da8e1bf2e44bc87c7259fb883a3df2b6f5e5eb70deda867cc744ff500ab9c6c978043eab977b506dc2f73464c5833a96977be8ee31d69f3249fd673de05915534a440d4eb7617ff34ad0c904c0d5ef43eb17c0f55e45713ead19b38cbbd47f676e7a874c2019c5df179e9192b0d1dae57fbc6bc23cdeb6239763025e8ae9bda032143987fbaca58589f2c1fae369399dbc458c5a7c866f92998caae14cbe901464f893badb1c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x79c, 0x1, [@m_nat={0x258, 0x1d, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffb2, 0xffffffff, 0x1, 0x2, 0x5}, @rand_addr=0x64010100, @private=0xa010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0x8, 0x100, 0x1}, @loopback, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xbe7, 0x7, 0x1, 0x622c, 0xff}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x1, 0x3, 0x6}, @multicast2, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x6, 0xfffffff7, 0x79}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8000, 0x3, 0x5, 0x292}, @remote, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x101, 0x1, 0x100}, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x4, 0xfffffe01, 0x9}, @remote, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xd138, 0x0, 0x0, 0x9}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1aa3, 0x3, 0x80, 0x7}, @rand_addr=0x64010101, @loopback, 0xff, 0x1}}]}, {0x9e, 0x6, "88cdb5b8144f8f04118340ac35d511b576149ff34a3cfd0f410799d22a5c477cff13bf474d8d189e658f60b221904b0d40314620be0425ae614aa27b88d6dc680dab895f53c359206e6e1c85d5793a39bc9465effe3c98df40d56a7441081962485af81ae71a579d58e09c3253c118aa2c6868d6219649e6cca3efb7e313d0154d44c2aeb98868d5910eb3fa21715b41f7688760829c495a00c1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_nat={0x94, 0x10, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xc3, 0x3, 0x20000000, 0x200, 0x1}, @empty, @empty, 0xff}}]}, {0x42, 0x6, "8403af4259257a70c43c1124869c0b6882f30488589e266975eff1e2cbc951d60c01596e45b32ec321b3800c75b416d30fcbd50712f3f7c7332af0923827"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x68, 0x11, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x2f, 0x6, "908ad166abef6157dc5a71d376a2f6e23503544dd01374861c65a656ebe6ee68d47877406c7f9fe9bb3f7a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xfc, 0x1e, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x3ff, 0xffffffffffffffff, 0x7fffffff, 0x2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xa7, 0x6, "606ffd852e3386d4e1ba0d6fd72d3e092bc260dfece3c6d06e624d04661fe2c4ff9a72d96dd2145d16271e55e522acf843fea0799d64e821a410dd6305edb96b3db807861f1638849d7a484546ff6ebb748ee0581ce237b32a2fe29799eaae545cbc85c62350a71860aecfb89aebb62f1dcbf4e51013670a7d8e878ca7d9751aa23e362bbc59dd158190a3b5da9703a25ad1198f0509d5d9c8dc1ea21cc72b6f747e5f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x50, 0xf, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x16, 0x6, "0c81e5fa54b07a4d1d3b2eed40fdbf50dc29"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x13c, 0x1c, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x3, 0xffffffffeffffffd, 0x3, 0x5c3}, @empty, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x330e, 0x401, 0xffffffffffffffff, 0x8, 0x4}, @broadcast, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x0, 0x3, 0x8a, 0x38}, @multicast2, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x20, 0xb00, 0x1, 0x4, 0x7}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x72, 0x6, "0ea01024bb23ca9cf89b4438de506eb2c3d9b2866f46b39aac397c86aae485c68e2e2d59f7d276762d0bf6798bf9934edcee865d38aa620c0df81aa3014dd4be2dcb3b997d17e26d3d1dd418dc26743c123ae9f7d71c2c93e5b90be369a3fa24356a1c5480c022ba14468d5eeb39"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x170, 0x5, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x8001, 'security\x00', 0x5a, 0xfffa, "4bcde892b6deaddf087c7fcb9f7b5d68055490e9e97a7c478d2b9e9f5d1dbf6192ff53d56292a8b77108b3e193b8e0544ac8422fc1de35fc8d7f2ff5c0d46878a204701ff5e23301a34c08"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffffff}, @TCA_IPT_INDEX={0x8, 0x3, 0xa72}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffff26}]}, {0x8c, 0x6, "398cdb74dfaa0d9bf92ab44b79a7215ce92297eb6e7bef8b871180cf9ef7b9dffc8e53a6c2ab404f2e0e8f0e7a40b753bc8a98f6f76863edc3190598ef49cdae14ddbb66cf88156c4dcdb10ae2f5494c3b13afb89808e1884d6e5f3449e08bfc6160779bea86646cab6518474b67301c6ab8fbdc85d1a0ae0e65a7c4a223d35612e80767b4c98c3e"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mpls={0x4c, 0xd, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xdefe7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x10, 0x6, "315124b5e1259553c3e92660"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x178, 0x1, [@m_bpf={0x88, 0x1b, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xc8f, 0x8, 0xffffffff, 0x1}}]}, {0x47, 0x6, "347d7cbdf6911b1c11d70f6676d9a58d69b4f91e6504f3aa065c6cee024267de14fd8c5735adc3e7ec7617b71da9d0793d9d0f26989e55a23c3474de4ce9284e229ed6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xae5611d4050d86fb, 0x2}}}}, @m_gact={0xec, 0x17, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x130b, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x245a, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a6b, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x7e3, 0x4, 0x7, 0x5}}]}, {0x82, 0x6, "3e230f1c1673124a4bd9d0cb809b30d863b299715c2902916765932c04b1f93a3fa36db64e48ff4ff8c76aaf41aba26d1a49013dcb02150a27691634973a7bafc2c1fc2d78c18aabd83762eeb0658002485f07b95f2fa8f67f038e4bec64ffca83797ce2bdbe44b68a6ed19619382420ff495076c7ace4b1b7742b320973"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x23e4}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04000000"], 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002500), 0x4203, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) stat(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000002a00)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002640)={0x360, 0x37, 0x400, 0x70bd2b, 0x25dfdbfe, {0x17}, [@nested={0x14, 0x27, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @fd}, @typed={0x8, 0x1b, 0x0, 0x0, @pid=r1}]}, @typed={0xc, 0x8f, 0x0, 0x0, @u64=0x3ff}, @generic="c8c51e957390131db048f925f17dff5bfe41a2f9a188b27b8db1d380a8d999016c410af09d3f12ceab74c7f889a1938496f9181acf2c72c5c6b55a80cca986d5", @nested={0x2be, 0x4e, 0x0, 0x1, [@generic="1beb18963788af9de9ed2de3c338f420edcbb2be2c29462f8a8322cf770cdff28eec8515afe36d977d4c1f64a2c3254e914f3b7f90e4f9678d1c3b44c710999e6eaffb4eb3f35113bbb4d5e59a646a95bc2fe55233801c801c19a968011816e5ffc6ce2d198b0e7b968d582b93cd180a79c3c3639681a388608d37f28a91527534b07a520a3da013bd44a89b78f9ed43e49d12f0ef08bdad9fec87cb9755e5af66015662ab587541e2d2f08eab9787ea0d8998c0e96fce707850031c06475f544ccd7847c68fefeaa7cf246863701769e05aaf62c3c9efd55c90623ff813efc4fe27f3abb501313cb5", @generic="e76b5b8c26b29e4c793e962ad2b30b02627baf8995c6d5cba0be2b86c3f1bf17a975c49b5a27ce0941ca9d6a9b0197122a3aa04e0a10f974f9bd8f9a977b4ee9577f95f1c7f67a4b9269872ba681773515aa04ee3218bd841b98f65d190331975cce64c7c7790e8ff26655e3d303b306a8bf8f6b6a4239c3389ef80453ec976791616efde9530603f36e73d93703eb2de22a", @typed={0x8, 0x19, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="b95176826f09c1b26d4527c55260e08409b593bba61559ed0fcfbeaf6b29c4cd5ba3f0568c1f1438bc570603f676d1747359fd435d4564970e984dd75ba0cbe33bbf890ac49cab9aee40f1d99e", @typed={0x4, 0x34}, @typed={0x8, 0x53, 0x0, 0x0, @uid=r2}, @generic="17bea457347a9c7f4e2f03e44ec2d2069e91be549e16d70f705fa39ab5195a83cc4ae3c43ef24d7d25c3feba4928a31166b503ad2dd9aa4afa5d1e771f925a7b1044ab83565818463deb702bd098b9ee5c5f96c8d806a1a504ad55b780b2e0104617a1033ed000e7763e9cdf7d371c0165ed7fce838776bb0e737154fcea6f68b5e76105f12557688ef007799a37221190f318450f78d86c4de220ded7d11a9b6c44c7962bbd969807a9925a0f90c5d73d35af3bc22f035610e7d5956bf092fa752ffed222ac6c644f251f0d6f3994d80adaa0cbbdd39b8999299f4d9051"]}, @typed={0x8, 0x60, 0x0, 0x0, @fd}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@local}, @nested={0x10, 0x8b, 0x0, 0x1, [@typed={0x8, 0x70, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x3a}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x200040c4}, 0x4000000) [ 474.946534][ T3647] Bluetooth: hci3: Malformed LE Event: 0x0d 03:57:46 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e000000ff0000007800000000aaaaaa21bbd301000000aaaa00"/36], 0x1d) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8e}, "e95a83b6fef77099aee7663360caf8d6c139c7099961f4ba7242da5e7b584969e0d39a3d7e09112eb84c4f37eb4d7edd9d094d96c153423ffad47c142d07f5a9ccd294cc62cdcef866de6816423ea4e2c01793e01b85ab964b4440c1fa065c1db7a448fa870c57174254b973707b8f11163d916ee23a9b765edada4083fc55925cc6d59193dce55ed5bcb663184e"}, 0x92) [ 475.030277][ T3647] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 475.030305][ T3647] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 86) 03:57:46 executing program 2: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @mcast2, 0xfc}}, 0x594, 0xbf}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={r0, 0x5, 0x61, "78d2b49c90fa3e750c0424bbd3c0797a818f4ae8c61761b05efb64fa323d6407b784fd2bf5b9fdb7d6d9f2607aa4b1d1bd8a1299741fafa9fa9b2a1a1a0ac359f65f966937d54270fa6c92d10b61247b8ac2ad4b25c451579c9cb7b8fedb644cb1"}, 0x69) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={r0, 0x2}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={r0, 0x1, 0x1ff}, &(0x7f0000000440)=0x8) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) [ 475.112567][ T3647] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 475.132959][ T3647] Bluetooth: hci1: Received unexpected HCI Event 0x00 03:57:46 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e000000ff0000007800000000aaaaaa21bbd301000000aaaa00"/36], 0x1d) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8e}, "e95a83b6fef77099aee7663360caf8d6c139c7099961f4ba7242da5e7b584969e0d39a3d7e09112eb84c4f37eb4d7edd9d094d96c153423ffad47c142d07f5a9ccd294cc62cdcef866de6816423ea4e2c01793e01b85ab964b4440c1fa065c1db7a448fa870c57174254b973707b8f11163d916ee23a9b765edada4083fc55925cc6d59193dce55ed5bcb663184e"}, 0x92) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e000000ff0000007800000000aaaaaa21bbd301000000aaaa00"/36], 0x1d) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8e}, "e95a83b6fef77099aee7663360caf8d6c139c7099961f4ba7242da5e7b584969e0d39a3d7e09112eb84c4f37eb4d7edd9d094d96c153423ffad47c142d07f5a9ccd294cc62cdcef866de6816423ea4e2c01793e01b85ab964b4440c1fa065c1db7a448fa870c57174254b973707b8f11163d916ee23a9b765edada4083fc55925cc6d59193dce55ed5bcb663184e"}, 0x92) (async) 03:57:46 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b320352e0e99cddc7f6200"/32], 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x13a}, @l2cap_cid_signaling={{0x136}, [@l2cap_info_rsp={{0xb, 0xbd, 0x6d}, {0xff42, 0x6, "1d6babea70f2f04cefba8bc5252883d9ba8f6b43010d8ab4253d4edae54f5f983c623402033350d832110c4e57e7f39bd724ea719b2f4507b3cc4c05191599d2906ac1238a758aa5badc3e27162c5f3fa275269aa5c877e7e7210ad99a366fe62f64491d6d83cce05a"}}, @l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x1000, 0xdbae, 0x7, 0x769}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0xfff7, 0x20}}, @l2cap_info_req={{0xa, 0x1e, 0x2}, {0x1000}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x0, 0x3}}, @l2cap_info_req={{0xa, 0xc9, 0x2}, {0xc82}}, @l2cap_disconn_req={{0x6, 0xa7, 0x4}, {0xeb0, 0x1}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x9166, 0xfff7}}, @l2cap_info_rsp={{0xb, 0x5, 0x8a}, {0x7, 0x2, "b0e7cb59ebac88bd39fb481f4094b7e90e4ef67a3f320d54405012e6f0e07c3e57adeabefbf8dbe9507d7b57c31a7d7733c3c81314b6d81c358cd077d60623603fa2246fbe368b1b069aaab7fee187010d0a390fcdf7c2ba331d63a2c5bb17c8cd90bd5bba9ddb844e3226f3a7cbbcf54609f3f4413db9377b12c5695b69fc9ebc92960e3205"}}]}}, 0x13f) [ 475.182714][ T3647] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 475.182739][ T3647] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:46 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)={0x0, 0xfb, 0xcb, 0x5, 0x8, "a78cd1b60331e6ce18190228762de662", "7a2501b2a67abf5842126b899b5f074065362d4113f6f1f0d8dbe6d831284119adb75c7a4e11b114bc9a36f358eac6c0f484d960434d28bd1461bd8d6f1c63ebbb1664efec21f2d5fc0bf490cba30724259518db8fb5c13f11781e416c386a071e818b20f783aa1c05ebb6501a43dda3542f8aadd78dcba7a3204b05cdc9ec6e12713e97c1ce74ed8821e56b8f307b0b9a1e603c662bb5626a16c7821fd3c10db18396991a1e62aa582568c351c9ff4a6c4496798ae3"}, 0xcb, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) [ 475.233983][ T3647] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:46 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0affc8000700ffffffffffffaaaaaaaaaa10aaaaaaa8aa1179000800e80401"], 0x22) 03:57:46 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)={0x0, 0xfb, 0xcb, 0x5, 0x8, "a78cd1b60331e6ce18190228762de662", "7a2501b2a67abf5842126b899b5f074065362d4113f6f1f0d8dbe6d831284119adb75c7a4e11b114bc9a36f358eac6c0f484d960434d28bd1461bd8d6f1c63ebbb1664efec21f2d5fc0bf490cba30724259518db8fb5c13f11781e416c386a071e818b20f783aa1c05ebb6501a43dda3542f8aadd78dcba7a3204b05cdc9ec6e12713e97c1ce74ed8821e56b8f307b0b9a1e603c662bb5626a16c7821fd3c10db18396991a1e62aa582568c351c9ff4a6c4496798ae3"}, 0xcb, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:57:46 executing program 2: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @mcast2, 0xfc}}, 0x594, 0xbf}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={r0, 0x5, 0x61, "78d2b49c90fa3e750c0424bbd3c0797a818f4ae8c61761b05efb64fa323d6407b784fd2bf5b9fdb7d6d9f2607aa4b1d1bd8a1299741fafa9fa9b2a1a1a0ac359f65f966937d54270fa6c92d10b61247b8ac2ad4b25c451579c9cb7b8fedb644cb1"}, 0x69) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={r0, 0x2}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={r0, 0x1, 0x1ff}, &(0x7f0000000440)=0x8) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) 03:57:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 87) 03:57:46 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002480)={&(0x7f0000000080)=@newtaction={0x23e4, 0x30, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{0x94, 0x1, [@m_skbedit={0x90, 0xf, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x5c, 0x6, "02fb423166ef271e8c9946861685a887194475e9d0213b86760e9c269a949b5689a6c3ba3621a81b4400eb33905f908190d7a24eddb200dc825eb0aa3b8bd8bce6dde0f4c555653b6952365e90d96e7d1b97efbd24d3691b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x18fc, 0x1, [@m_csum={0xe4, 0x1e, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x0, 0xfffffffe, 0x10000}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2a87719c, 0x8, 0x8, 0x100, 0x9}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x3, 0x2, 0x419, 0x7}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0xffffffffffffffff, 0x4e, 0x6}, 0x1d}}]}, {0x46, 0x6, "22c792f3cb9b63723079c85f7f70d93bf80f89ab6f003f42af856793ab6a479eda630a9fff6093b33e3459625bd95004cbc200e7a8e3bc5be3c54064872c55380ad6"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x11c, 0x15, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x200}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xd8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3ff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffd}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0xbe, 0x6, "4c36b334a867097867b00d97da8332a6d32693995a0dcabff75239f27b46d6f78f429bf89d4b0172fd696e301f8190c41be4a21a0dc14633b6082612a7ca5120df1905fa5744f283db1dc38fc939c4ebabab30c6f15fdb7706a1bb50461b924f0e6e0f80378ba3875df2df051be7e4ff9ade74a267609e890c443878fd3fefa544b5921f1628eebcbf5fec1886d4ecb539768ac94b016f90640986fe2e8b4474273b2a34a868dcaf1972461b38579f1275a63fb4cdf202ad70c1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x78, 0x14, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x3, 0x0, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0x25, 0x6, "49fbeec775b1e79a6d32864cc79838d8b9444306108805fa62ba9e3d39a686e626"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0xc4, 0x1b, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2a, 0x0, 0xfffffffffffffff3, 0x5, 0x200}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x9, 0x7, 0x1, 0x8000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x46, 0x6, "473b7f1b65fd91cfb297ffe1515c7bc5d3bcf2937aa801be538cfc57921b223b0e700f76d909c0d4fd7d61c0fd0488c9da3aba15edb1d4b0bf53e629525ef361b3ca"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}, @m_police={0x46c, 0x1f, 0x0, 0x0, {{0xb}, {0x420, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x3f, 0x10000, 0x3b, 0x526a, 0x8, 0xfffffffe, 0x1000, 0x15, 0x1, 0x7, 0x614d5a4b, 0xfff, 0x5, 0x2, 0x8, 0x40, 0xd0f, 0x6, 0x1304000, 0x1, 0x7, 0x5, 0x7f, 0x7, 0x0, 0x7ff, 0x5, 0x400, 0x0, 0x20, 0x1, 0xd20, 0x9, 0x7ff, 0x724c, 0x80000000, 0x800, 0x80000000, 0x80, 0x8a, 0x3, 0x3, 0x1, 0x3, 0x7, 0x4, 0xffff, 0xfffffffe, 0x2, 0x4, 0x20, 0x7, 0x9, 0x5, 0x2, 0x366357aa, 0xffffffc0, 0x44, 0x401, 0x1000, 0x515, 0xff, 0x8000, 0xffff, 0x9, 0x80000000, 0x3, 0x6, 0x6, 0x2400000, 0x9, 0x2, 0x1, 0x3, 0x7, 0x100, 0xffff, 0x43f, 0xffff, 0x0, 0x957, 0x20, 0x5, 0x9bed, 0xcb19, 0x6, 0xb0e, 0x1, 0x1f, 0x787e4a88, 0x5, 0x0, 0x0, 0x27, 0x7, 0x8000, 0x4, 0xa00000, 0x8000, 0x5, 0x3ff, 0x6213, 0x400, 0x80000000, 0x1, 0x40, 0x2c9, 0xffff0001, 0x3, 0x3, 0x7, 0xda47, 0x6, 0x7, 0x7f, 0x6, 0x1, 0xbc7, 0x0, 0x5ca6, 0x7, 0x5, 0x7, 0xfffffffb, 0x9, 0x4, 0x1, 0x4, 0x2, 0x2, 0x9, 0x6, 0x7ff, 0xffffff01, 0x3, 0x6, 0x200, 0x20, 0x2, 0x1, 0x3, 0xcb, 0xed, 0x3f, 0x7fffffff, 0x6, 0x8, 0x3, 0x6, 0x3, 0x0, 0x100, 0x6, 0x2, 0x1, 0x0, 0x0, 0x8846, 0x401, 0x7fffffff, 0x10001, 0xfff, 0x8, 0xfffffff8, 0x5, 0x10001, 0x2, 0x2, 0x4, 0x4, 0x4, 0x6, 0x3a, 0x0, 0x1000, 0x0, 0x5, 0x20, 0xfff, 0x3, 0x6, 0x8000, 0x6, 0x1f, 0x6, 0xfe1, 0xfff, 0x7, 0x4, 0x1fe, 0x1, 0xfffffc64, 0x5, 0x200, 0x0, 0x3, 0x1, 0x9, 0x9, 0x6, 0x7, 0x1, 0x2, 0x8, 0x7, 0x6, 0x200, 0x4, 0xfffffffc, 0x1, 0x7, 0x2118, 0xe2, 0xffffffc0, 0x5a29, 0x2, 0x8, 0x2, 0x1, 0x7, 0x1, 0x0, 0xe95, 0xffffffff, 0x0, 0xfff, 0xb0, 0xb89, 0xb688, 0x1000, 0x1, 0x401, 0x4, 0x976, 0x9, 0x80000001, 0xec, 0x1, 0x8000, 0x5, 0x8, 0x6, 0x10000, 0x20, 0xe850, 0x4, 0x5, 0x80000001, 0x200, 0xffffffff, 0x5, 0x8, 0x3ff, 0x70f, 0xfffffff8]}]]}, {0x22, 0x6, "b8968f062ae027b40019d16f217048dfae1fe8f01e9c78016eb0522d63de"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x1048, 0x8, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x108, 0x19, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xc9, 0x20000000, 0x10000, 0x20}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x3e8838a1, 0x5, 0x80000000, 0xa5}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa2, 0x713c47ef, 0x6, 0x10001, 0x20}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7fffffff, 0x20000000, 0x40, 0x8}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x10000000, 0x7, 0x3}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x6ed2, 0x5, 0x6788, 0x4}, 0x4c}}]}, {0x34, 0x6, "5e44aa312d000deafa99cead9e3ca85c478c129909396befad61bb781e71ad2dba8c792afc4d49b645a44ad407abaf69"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5}}}}]}, {0x12c, 0x1, [@m_skbedit={0x128, 0xe, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1f}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}]}, {0xe3, 0x6, "51ae4166309b7911dfbd44a6d5fa7a4110dd606f9c860f80de2ff28be6ed4d19f47b8c0065dac8022334f3225beb3634f4aaad21203fad3d96da8e1bf2e44bc87c7259fb883a3df2b6f5e5eb70deda867cc744ff500ab9c6c978043eab977b506dc2f73464c5833a96977be8ee31d69f3249fd673de05915534a440d4eb7617ff34ad0c904c0d5ef43eb17c0f55e45713ead19b38cbbd47f676e7a874c2019c5df179e9192b0d1dae57fbc6bc23cdeb6239763025e8ae9bda032143987fbaca58589f2c1fae369399dbc458c5a7c866f92998caae14cbe901464f893badb1c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x79c, 0x1, [@m_nat={0x258, 0x1d, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffb2, 0xffffffff, 0x1, 0x2, 0x5}, @rand_addr=0x64010100, @private=0xa010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0x8, 0x100, 0x1}, @loopback, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xbe7, 0x7, 0x1, 0x622c, 0xff}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x1, 0x3, 0x6}, @multicast2, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x6, 0xfffffff7, 0x79}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8000, 0x3, 0x5, 0x292}, @remote, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x101, 0x1, 0x100}, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x4, 0xfffffe01, 0x9}, @remote, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xd138, 0x0, 0x0, 0x9}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1aa3, 0x3, 0x80, 0x7}, @rand_addr=0x64010101, @loopback, 0xff, 0x1}}]}, {0x9e, 0x6, "88cdb5b8144f8f04118340ac35d511b576149ff34a3cfd0f410799d22a5c477cff13bf474d8d189e658f60b221904b0d40314620be0425ae614aa27b88d6dc680dab895f53c359206e6e1c85d5793a39bc9465effe3c98df40d56a7441081962485af81ae71a579d58e09c3253c118aa2c6868d6219649e6cca3efb7e313d0154d44c2aeb98868d5910eb3fa21715b41f7688760829c495a00c1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_nat={0x94, 0x10, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xc3, 0x3, 0x20000000, 0x200, 0x1}, @empty, @empty, 0xff}}]}, {0x42, 0x6, "8403af4259257a70c43c1124869c0b6882f30488589e266975eff1e2cbc951d60c01596e45b32ec321b3800c75b416d30fcbd50712f3f7c7332af0923827"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x68, 0x11, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x2f, 0x6, "908ad166abef6157dc5a71d376a2f6e23503544dd01374861c65a656ebe6ee68d47877406c7f9fe9bb3f7a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xfc, 0x1e, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x3ff, 0xffffffffffffffff, 0x7fffffff, 0x2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xa7, 0x6, "606ffd852e3386d4e1ba0d6fd72d3e092bc260dfece3c6d06e624d04661fe2c4ff9a72d96dd2145d16271e55e522acf843fea0799d64e821a410dd6305edb96b3db807861f1638849d7a484546ff6ebb748ee0581ce237b32a2fe29799eaae545cbc85c62350a71860aecfb89aebb62f1dcbf4e51013670a7d8e878ca7d9751aa23e362bbc59dd158190a3b5da9703a25ad1198f0509d5d9c8dc1ea21cc72b6f747e5f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x50, 0xf, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x16, 0x6, "0c81e5fa54b07a4d1d3b2eed40fdbf50dc29"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x13c, 0x1c, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x3, 0xffffffffeffffffd, 0x3, 0x5c3}, @empty, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x330e, 0x401, 0xffffffffffffffff, 0x8, 0x4}, @broadcast, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x0, 0x3, 0x8a, 0x38}, @multicast2, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x20, 0xb00, 0x1, 0x4, 0x7}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x72, 0x6, "0ea01024bb23ca9cf89b4438de506eb2c3d9b2866f46b39aac397c86aae485c68e2e2d59f7d276762d0bf6798bf9934edcee865d38aa620c0df81aa3014dd4be2dcb3b997d17e26d3d1dd418dc26743c123ae9f7d71c2c93e5b90be369a3fa24356a1c5480c022ba14468d5eeb39"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x170, 0x5, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x8001, 'security\x00', 0x5a, 0xfffa, "4bcde892b6deaddf087c7fcb9f7b5d68055490e9e97a7c478d2b9e9f5d1dbf6192ff53d56292a8b77108b3e193b8e0544ac8422fc1de35fc8d7f2ff5c0d46878a204701ff5e23301a34c08"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffffff}, @TCA_IPT_INDEX={0x8, 0x3, 0xa72}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffff26}]}, {0x8c, 0x6, "398cdb74dfaa0d9bf92ab44b79a7215ce92297eb6e7bef8b871180cf9ef7b9dffc8e53a6c2ab404f2e0e8f0e7a40b753bc8a98f6f76863edc3190598ef49cdae14ddbb66cf88156c4dcdb10ae2f5494c3b13afb89808e1884d6e5f3449e08bfc6160779bea86646cab6518474b67301c6ab8fbdc85d1a0ae0e65a7c4a223d35612e80767b4c98c3e"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mpls={0x4c, 0xd, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xdefe7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x10, 0x6, "315124b5e1259553c3e92660"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x178, 0x1, [@m_bpf={0x88, 0x1b, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xc8f, 0x8, 0xffffffff, 0x1}}]}, {0x47, 0x6, "347d7cbdf6911b1c11d70f6676d9a58d69b4f91e6504f3aa065c6cee024267de14fd8c5735adc3e7ec7617b71da9d0793d9d0f26989e55a23c3474de4ce9284e229ed6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xae5611d4050d86fb, 0x2}}}}, @m_gact={0xec, 0x17, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x130b, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x245a, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a6b, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x7e3, 0x4, 0x7, 0x5}}]}, {0x82, 0x6, "3e230f1c1673124a4bd9d0cb809b30d863b299715c2902916765932c04b1f93a3fa36db64e48ff4ff8c76aaf41aba26d1a49013dcb02150a27691634973a7bafc2c1fc2d78c18aabd83762eeb0658002485f07b95f2fa8f67f038e4bec64ffca83797ce2bdbe44b68a6ed19619382420ff495076c7ace4b1b7742b320973"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x23e4}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04000000"], 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002500), 0x4203, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) stat(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000002a00)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002640)={0x360, 0x37, 0x400, 0x70bd2b, 0x25dfdbfe, {0x17}, [@nested={0x14, 0x27, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @fd}, @typed={0x8, 0x1b, 0x0, 0x0, @pid=r1}]}, @typed={0xc, 0x8f, 0x0, 0x0, @u64=0x3ff}, @generic="c8c51e957390131db048f925f17dff5bfe41a2f9a188b27b8db1d380a8d999016c410af09d3f12ceab74c7f889a1938496f9181acf2c72c5c6b55a80cca986d5", @nested={0x2be, 0x4e, 0x0, 0x1, [@generic="1beb18963788af9de9ed2de3c338f420edcbb2be2c29462f8a8322cf770cdff28eec8515afe36d977d4c1f64a2c3254e914f3b7f90e4f9678d1c3b44c710999e6eaffb4eb3f35113bbb4d5e59a646a95bc2fe55233801c801c19a968011816e5ffc6ce2d198b0e7b968d582b93cd180a79c3c3639681a388608d37f28a91527534b07a520a3da013bd44a89b78f9ed43e49d12f0ef08bdad9fec87cb9755e5af66015662ab587541e2d2f08eab9787ea0d8998c0e96fce707850031c06475f544ccd7847c68fefeaa7cf246863701769e05aaf62c3c9efd55c90623ff813efc4fe27f3abb501313cb5", @generic="e76b5b8c26b29e4c793e962ad2b30b02627baf8995c6d5cba0be2b86c3f1bf17a975c49b5a27ce0941ca9d6a9b0197122a3aa04e0a10f974f9bd8f9a977b4ee9577f95f1c7f67a4b9269872ba681773515aa04ee3218bd841b98f65d190331975cce64c7c7790e8ff26655e3d303b306a8bf8f6b6a4239c3389ef80453ec976791616efde9530603f36e73d93703eb2de22a", @typed={0x8, 0x19, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="b95176826f09c1b26d4527c55260e08409b593bba61559ed0fcfbeaf6b29c4cd5ba3f0568c1f1438bc570603f676d1747359fd435d4564970e984dd75ba0cbe33bbf890ac49cab9aee40f1d99e", @typed={0x4, 0x34}, @typed={0x8, 0x53, 0x0, 0x0, @uid=r2}, @generic="17bea457347a9c7f4e2f03e44ec2d2069e91be549e16d70f705fa39ab5195a83cc4ae3c43ef24d7d25c3feba4928a31166b503ad2dd9aa4afa5d1e771f925a7b1044ab83565818463deb702bd098b9ee5c5f96c8d806a1a504ad55b780b2e0104617a1033ed000e7763e9cdf7d371c0165ed7fce838776bb0e737154fcea6f68b5e76105f12557688ef007799a37221190f318450f78d86c4de220ded7d11a9b6c44c7962bbd969807a9925a0f90c5d73d35af3bc22f035610e7d5956bf092fa752ffed222ac6c644f251f0d6f3994d80adaa0cbbdd39b8999299f4d9051"]}, @typed={0x8, 0x60, 0x0, 0x0, @fd}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@local}, @nested={0x10, 0x8b, 0x0, 0x1, [@typed={0x8, 0x70, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x3a}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x200040c4}, 0x4000000) 03:57:46 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)={0x0, 0xfb, 0xcb, 0x5, 0x8, "a78cd1b60331e6ce18190228762de662", "7a2501b2a67abf5842126b899b5f074065362d4113f6f1f0d8dbe6d831284119adb75c7a4e11b114bc9a36f358eac6c0f484d960434d28bd1461bd8d6f1c63ebbb1664efec21f2d5fc0bf490cba30724259518db8fb5c13f11781e416c386a071e818b20f783aa1c05ebb6501a43dda3542f8aadd78dcba7a3204b05cdc9ec6e12713e97c1ce74ed8821e56b8f307b0b9a1e603c662bb5626a16c7821fd3c10db18396991a1e62aa582568c351c9ff4a6c4496798ae3"}, 0xcb, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:57:46 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0affc8000700ffffffffffffaaaaaaaaaa10aaaaaaa8aa1179000800e80401"], 0x22) 03:57:46 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e000000ff0000007800000000aaaaaa21bbd301000000aaaa00"/36], 0x1d) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8e}, "e95a83b6fef77099aee7663360caf8d6c139c7099961f4ba7242da5e7b584969e0d39a3d7e09112eb84c4f37eb4d7edd9d094d96c153423ffad47c142d07f5a9ccd294cc62cdcef866de6816423ea4e2c01793e01b85ab964b4440c1fa065c1db7a448fa870c57174254b973707b8f11163d916ee23a9b765edada4083fc55925cc6d59193dce55ed5bcb663184e"}, 0x92) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e000000ff0000007800000000aaaaaa21bbd301000000aaaa00"/36], 0x1d) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8e}, "e95a83b6fef77099aee7663360caf8d6c139c7099961f4ba7242da5e7b584969e0d39a3d7e09112eb84c4f37eb4d7edd9d094d96c153423ffad47c142d07f5a9ccd294cc62cdcef866de6816423ea4e2c01793e01b85ab964b4440c1fa065c1db7a448fa870c57174254b973707b8f11163d916ee23a9b765edada4083fc55925cc6d59193dce55ed5bcb663184e"}, 0x92) (async) [ 475.382907][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 475.382933][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d [ 475.434917][ T3662] Bluetooth: hci1: Received unexpected HCI Event 0x00 03:57:46 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002480)={&(0x7f0000000080)=@newtaction={0x23e4, 0x30, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{0x94, 0x1, [@m_skbedit={0x90, 0xf, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x5c, 0x6, "02fb423166ef271e8c9946861685a887194475e9d0213b86760e9c269a949b5689a6c3ba3621a81b4400eb33905f908190d7a24eddb200dc825eb0aa3b8bd8bce6dde0f4c555653b6952365e90d96e7d1b97efbd24d3691b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x18fc, 0x1, [@m_csum={0xe4, 0x1e, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x0, 0xfffffffe, 0x10000}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2a87719c, 0x8, 0x8, 0x100, 0x9}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x3, 0x2, 0x419, 0x7}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0xffffffffffffffff, 0x4e, 0x6}, 0x1d}}]}, {0x46, 0x6, "22c792f3cb9b63723079c85f7f70d93bf80f89ab6f003f42af856793ab6a479eda630a9fff6093b33e3459625bd95004cbc200e7a8e3bc5be3c54064872c55380ad6"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x11c, 0x15, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x200}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xd8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3ff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffd}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0xbe, 0x6, "4c36b334a867097867b00d97da8332a6d32693995a0dcabff75239f27b46d6f78f429bf89d4b0172fd696e301f8190c41be4a21a0dc14633b6082612a7ca5120df1905fa5744f283db1dc38fc939c4ebabab30c6f15fdb7706a1bb50461b924f0e6e0f80378ba3875df2df051be7e4ff9ade74a267609e890c443878fd3fefa544b5921f1628eebcbf5fec1886d4ecb539768ac94b016f90640986fe2e8b4474273b2a34a868dcaf1972461b38579f1275a63fb4cdf202ad70c1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x78, 0x14, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x3, 0x0, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0x25, 0x6, "49fbeec775b1e79a6d32864cc79838d8b9444306108805fa62ba9e3d39a686e626"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0xc4, 0x1b, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2a, 0x0, 0xfffffffffffffff3, 0x5, 0x200}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x9, 0x7, 0x1, 0x8000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x46, 0x6, "473b7f1b65fd91cfb297ffe1515c7bc5d3bcf2937aa801be538cfc57921b223b0e700f76d909c0d4fd7d61c0fd0488c9da3aba15edb1d4b0bf53e629525ef361b3ca"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}, @m_police={0x46c, 0x1f, 0x0, 0x0, {{0xb}, {0x420, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x3f, 0x10000, 0x3b, 0x526a, 0x8, 0xfffffffe, 0x1000, 0x15, 0x1, 0x7, 0x614d5a4b, 0xfff, 0x5, 0x2, 0x8, 0x40, 0xd0f, 0x6, 0x1304000, 0x1, 0x7, 0x5, 0x7f, 0x7, 0x0, 0x7ff, 0x5, 0x400, 0x0, 0x20, 0x1, 0xd20, 0x9, 0x7ff, 0x724c, 0x80000000, 0x800, 0x80000000, 0x80, 0x8a, 0x3, 0x3, 0x1, 0x3, 0x7, 0x4, 0xffff, 0xfffffffe, 0x2, 0x4, 0x20, 0x7, 0x9, 0x5, 0x2, 0x366357aa, 0xffffffc0, 0x44, 0x401, 0x1000, 0x515, 0xff, 0x8000, 0xffff, 0x9, 0x80000000, 0x3, 0x6, 0x6, 0x2400000, 0x9, 0x2, 0x1, 0x3, 0x7, 0x100, 0xffff, 0x43f, 0xffff, 0x0, 0x957, 0x20, 0x5, 0x9bed, 0xcb19, 0x6, 0xb0e, 0x1, 0x1f, 0x787e4a88, 0x5, 0x0, 0x0, 0x27, 0x7, 0x8000, 0x4, 0xa00000, 0x8000, 0x5, 0x3ff, 0x6213, 0x400, 0x80000000, 0x1, 0x40, 0x2c9, 0xffff0001, 0x3, 0x3, 0x7, 0xda47, 0x6, 0x7, 0x7f, 0x6, 0x1, 0xbc7, 0x0, 0x5ca6, 0x7, 0x5, 0x7, 0xfffffffb, 0x9, 0x4, 0x1, 0x4, 0x2, 0x2, 0x9, 0x6, 0x7ff, 0xffffff01, 0x3, 0x6, 0x200, 0x20, 0x2, 0x1, 0x3, 0xcb, 0xed, 0x3f, 0x7fffffff, 0x6, 0x8, 0x3, 0x6, 0x3, 0x0, 0x100, 0x6, 0x2, 0x1, 0x0, 0x0, 0x8846, 0x401, 0x7fffffff, 0x10001, 0xfff, 0x8, 0xfffffff8, 0x5, 0x10001, 0x2, 0x2, 0x4, 0x4, 0x4, 0x6, 0x3a, 0x0, 0x1000, 0x0, 0x5, 0x20, 0xfff, 0x3, 0x6, 0x8000, 0x6, 0x1f, 0x6, 0xfe1, 0xfff, 0x7, 0x4, 0x1fe, 0x1, 0xfffffc64, 0x5, 0x200, 0x0, 0x3, 0x1, 0x9, 0x9, 0x6, 0x7, 0x1, 0x2, 0x8, 0x7, 0x6, 0x200, 0x4, 0xfffffffc, 0x1, 0x7, 0x2118, 0xe2, 0xffffffc0, 0x5a29, 0x2, 0x8, 0x2, 0x1, 0x7, 0x1, 0x0, 0xe95, 0xffffffff, 0x0, 0xfff, 0xb0, 0xb89, 0xb688, 0x1000, 0x1, 0x401, 0x4, 0x976, 0x9, 0x80000001, 0xec, 0x1, 0x8000, 0x5, 0x8, 0x6, 0x10000, 0x20, 0xe850, 0x4, 0x5, 0x80000001, 0x200, 0xffffffff, 0x5, 0x8, 0x3ff, 0x70f, 0xfffffff8]}]]}, {0x22, 0x6, "b8968f062ae027b40019d16f217048dfae1fe8f01e9c78016eb0522d63de"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x1048, 0x8, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0x1004, 0x6, "837dbfb4b12fbbdf5e73bb3473190aa9cd58c59f9930f9dca62be2a32ae514b4adf0dcc4c164e2afbbd423559d004708fc9f6033313df25538d83a2445b2257bd6a9559daee70b43e156acf8c7e6bde46b8c207ee0275a08a17fd4a22433c4685acf30ac6c49408f5348f5ae5b22e4abb9dd77315bc454570b735373502222a5f44b1e6245fee45641a72c49459511a3809824dd531c3d6adb8c31f723fbae063242f978eb165dd9ba8c71457b9f1e9730be2535dcc8c7adf2b5d187d661cf3ad13fb6c424205e4f2f2bf2c2478a2499ae6f34a8ae8dbeb8651f93ab57efa18adcfeed43d8e65eb2aa682f6120cb765352b622fc21969bafda17dc926453ff5072e9ce111ac1ee0e16b1b30d293a00206652e439dee86099d6d878ddabc0bb58129ee918b6f6a75534e419c95439fdd8b745a4c42f57ad6d5b739c36893271a615a2e54f9c16df0f2cf2c40eab445e17556206a07284ba11db7fed73571272735ff53b875e67f763a7852ca687f0f1b201dff587fac664a6f3e995b312da60efdd83c7e7535517e6de57eab2ff445437d6aa9862593a351fb0f0f11210b06062f65707ea88e46ed5b7eec9ddcd6793bb04157d06c3767f15ee207bdd4a968628890686649a9c45d3db96a1ca0ffcf3b733d68d987faa7bf8f5a13cdbf26b16c4325db54e57d041f88734f46663df76ba96210a405ec50c1a2f8324e86255fe125c2da4ee9c20866aa9da369428f45929319a9dce2aec310f7e5e91612c112a1fbddf5452e93015c377d08cc6bfe55594f644a1344a93e9fc9f4b9da6cd30201e55521d45070ba08774f400434a6d1ef8aa74cc534ce7a0b2ae162cb913faeee1951416b8d02e64188597b4618c62bb40cb2594d5b857449e8e8928578b9ca49ea2dda4b6ecdc751f7b173f33b359e25d8f3db7f92545ab4fbf187b2f6425bf2be12c474749647e16765ce8b9f9ce94ccee16d6e712e2ec0f548b90ed1191d0ed8a35c2e9500405d25de4ced7002f423f060138e128eff451462f09f1ed32a1e8025139d2966301bd9f22eb8170040f965d573a096b943a1c85b82b176211e6a8fc8f9af557bb9fc6a6a0c9a08780ed2ed1826280b763ce79207a610df6f82f2b68e75ec2ee883b603a7121d8eb51aad98ef18702e0a8e97be20b7be4b660703192e4887a1ba8469364ceadbe71448472d5784f3edba2ba7a9f5087649749be90e17885e7153af5b764612355f4141a5534794ef4a030c73bf1fd75602248bacedeb53e4bcc60ad7883a7537d9189745ce346a2d30e9a4ad093174ec8652400f700748d53100454d74283272773c33c158ee7cdb9cb0476599664d040cb6c41f4c12a9e344f0a459495813218de0244d1cd80bcbcb0b4abf9bcf397e1b1601f20c2cee98c373fd5d2a830e20936416978929ab3920dcc83b1ad9035fb32d16605ee6441c3edd96af10b4e96f97ff5ccebbe79965e6cd6d18ee7227e14360da9763557e6fc1dfc37aa0fc1457109e9af6201f67fde6d6a803101774d14440215dd364340dfd322a171b0d772dec42c1b06539c24e64027c2751789b60f136f56e19f7967eb5f620d6355d5e5af59f173ef2a7f46b0d3464a7416f5c350671e34d73488cc3725b6f43f0b7ec4344577dcb01380e988dfb55c4cc4214d21aeb1a7caae008ca9deae21bec5935a9936841cab6ccdc8d93bb1b703ee6f3d3b2162a5d22aa4a09de7301dfcf04bc55ca286ac0d1a5600578c93a8d31ebdd9bdb582a1e6af7136a99925d42611fb264a3a93beae5e7ac70ed2e28f94eb2360472ef56d4ba4dae1fdf78be3fa0e96492fcac79d551cc44b54a5dae8bf7d9b3ca78a4fe257208063e66371a92e72b6fa7e43794caf776e390feb124d7dda19b332a3abd2b2b43ac916416e282054ecf9bd1853997234714cab740e3f2629dcefd4efaad41795ee927ba1dfee6916e0293e8f009e286302fa1e4e2edc2ddeb7e2dba7881cdcd6894135390ea785e537cdafa112f8c2c9bc8bade00e32d64b86627b95b5a96f949bfa04302549c11b71dfbf6532237d42fd3f684c9929c00f4cf8f1e2f415fe23f1b4dd1430691b6511c4314f3cb7d94c789840ceaf6b0ef965abe8a45d558bc258a2ccb7390c2b7b713b6a4629df852d51454543e4f6673d5fc48c6f3b8bbe22ebced81326bad218134bd40a6b0bfb337294ad026de5795fded7149b0bbc5f7fbbf99b5eeb6e7d41afb41aaace21b0d7dd3c139b0e6b65220997abde62990f7d60fb704fc1e4f5aebc22e9740d23644d68cdd6e2c520d6b08ae82b8f7f5887d775343a84de004a74c0d56ec9bc9693902c4dfe52726dd58c94f4604b3877d47f4afe181a85d9ebef2428ebc557eb1dd25667afa0ba40a8fc324b12b1b6ef2e06099b5ecf817fe2aebd6527a7b0bcfd0cb9823a2cf39b604bd280f22ebc14c3f7a9e89fca5afd7f95f5fb51e256e43f7d6aa187245fa47f1128612c508314ec6219afbef6c2ef768dbe9af060800d680bace081811486d14cc892e91beef38d85bafa24f464a3bbfb98f8fa118be6f78cebc50989ca2aa841554e6d36af3d35a0d30f7cdd206ad5c4253b7a9b4818d6b68012852f06bf8c3b1a6d699d4bb5d0210e86d63970357c614954d13f9c10f789456fcd53de55d0190e0350dfe258c83f2f65c562c5c02f6dfab9b2f22dd5754b22c9da146d9d7de6b1675fbeac13b613f413b070fca1df8b861338d998e7ee42b859ea2a6803b305a256cc9797099f589b6ca91ec8da9495f5f064654a2923a053b50f6c0fa7a9bf9d9255d27cc751eb9f3523191a5db241741010f2cce477c6f1c837cea687db3678d0a3dafe32bbc9bfa0da96cbe48ab7dfd8023e4846dda9edc68fcc29993afdf0392fa609efa20406b111a7cad6a1432b87f71c3f6b368ac52247bd1d25b207f389dbef268909e840c8da3af2e68fb906879ea9ee898aad3913dd2c482e633b700ddfd7f1d3db2e584ccabf3b323afe7684b4937cd0e2216753caba2fd772db25d6c30cca5b33e2571d82f40eb16ee365e30ebbeade8b3ad4dc6833473f1f0e440f55beaf8c553044be28c583ebde2d9acc122edf5cea935007aebfdb62c4e92332f19a72a7654f3d29a9ab0f5eb26f278ccad9bafc560726724e6e3e9f8b1e7e217fe4bed20099d58e3aee6c591c69940b5b11680f587e399d889687f0ea4636d55c486aa063c2c40ae3bda79277ff5f6496fac51c0411316e4194d674e1bd03f18ab92e774de7444c96114c0c47f86317e1df6207fc5c8640dd05432b2174c31eb6b4300363e07365eda1ba9cbba703456c31d36607748ac8ed39de72f7b81b32d722bedbeba35df70a9f1bbfbc22d5616d60e55adf870fdacddf450d7e03915fa0a3860a569c1c8b472e5dead20bd420e74ef2c1e71ea861a74d1eb7f3c331d219bdf9207e5e4a50ba889d1d044449bfab9dd78542d543caed2e841026f99b04695de3b07ef91a26411ef457c30d3df4718eab6a31abbf0b7d8801df78c072786bad32823c856debd4142f6e0c85d83114acb9331d2363afa2a78cea3fced1f4ca08241e234c91ea0e8438677b71596eaef43059e31c1caf354bc15a9819562bfb2d036575a07dda8d096f6b0ad7ae6857d5e25118a09d54b9a5b8f6cbe48ab8e95da6b4f39b91aa5af863f56d9685d4118398a8c955a8aa33942996d23378a71f6b638e2fc714655fb91e692ad6901d7120689c84d96aedc4343856bcac5b04077750885ee539218198b5e750aa8b897bdf0fbd941cbf6448655410f2c694af0f0dd8fcaa28e7829b9933ae71f94ad07b084783cdb772287d03b70058745229979c71b3b49b210d8a2961be0e9c7d5097e62ec6d1e54ce4e170f66733e9e300013ceadf4c88c841ff8c396fc3dda48134568bbdbd1061d61e1b534e7d51952defc3390e6462e18b7426926b18da9ae322aa640fb2745440a9e9e6fc509ea44b09219b96a82146c55b45aa73c9c0a62105b62a596d9b12cb49cca9fa8a88f82e4c16a7e2ebed2ed84326ffd55f60f0e6c9526dff322c391a40e2e84d3ca36be11d7b24fc6a8e5f8b68da27a19632980ea2e588689f603655fa362dff272ec71ad79f97b684c92501fe1040804e1fc33ce46a7e4ce4e4261626c4c4d65c14c8413dace2729d0881ac0502010fb8f60b01e1e273df7135f1d5bc7a0c2a668c2c22f23ae432272bae7dc898c273232ed5bf8a7df6503bc475efedd036e0c29ffc1ef31ef08563ee7094123e5bc9720709ca4ef4fdd2fef4e9708e1d432c33f5afbd3e2e76091c07611c5ebb385793c61141cac7497ce3a72dcebaf936b964b4de0341065ae308cc9a955f9d41aa0a8d9316dab58bcc41682cc44d5c2422343c3911ce373966dfdb86e7df783ab58062b90ddb0549c5064f9cd180cf103ea33154bbeeee70914cc416479e794964bf96121ad54dd40719863d95d72935bfbaec5d933ca54afd091c3bc35f6aa137d6d5961fefb9f1af57211edfa6b7060c65d8d8ad9a8b1f71e7768e800e89ba316de1e8dac5d554abc745b2b5412f98d443309e2a6d4571a3a7869a508edae33600f7aa9d425bd6690c921872b101ef7f1f7f33dd37da06553674e5f787a2b8878a4d2878fd03db85a12252b8fa674f4e8f07b719d827f1a7fae6778409c2cbb4267ec52bc685b244c08f30de1f15bc91cbe5f0a8dd3c7afd1704b4b7f71bb84556e20476ea6fcd2cc855b07c0655057594ed8d9552c595d8550aaa2b5087cce800d8bd6d6859f5f67741b1a40333c7b706168fa9d01514ad27e7da11f8123a29193d14776553fe2305a004bf318576990263e21c3b71e47d295f4c98da819cff80600e634a66ffb8991ce8848f08642bc0cf04e335969cdc9c86f96105a58c666c56bea2ff088a519e2090cf63f6d7f6d4d8c20555e9d2be3a27d11a9068d02f07db3f4010f5ae1003dddc9586bcda0a65c811813dda115a3332931683f1813d9fe3bc1747b527eb395c8a0cbc4b79149b538f6624e076798d23cf58bbfb7607449a0899fb4b0762dcebbb33fe16ec324153a0b765abb8d96f6f0cf877e289dfc0a1a57a26d48db5c18df4a1872efb7ae55300f895daf4301a38eac3bb611e777c9eb7dc8a509793cd3f7a394893b300ddb096fc9cdf6312fed85d0f603c8a5a7e17575a711991f75455b5950b2fcc9fddf841567ebf3607efa036635d723080269679bcd2c73e25e5562499f5ffa4d03cb972dc9a83cddf931f03c8fdcabde58d79dcdfe97f5ca22c3958793116e42f97c111ad907099d615b4682f49ac5a968ce7f2985329f1eb4577bca844c5288b1b646f7be65bf3b72d3fa13bff28f3b0e0fbe8013b2e89687b51113acd89fde616779156a266270f61c7dd9995767de6f5842d543b788c3dbf40d8108754d0ba38e2c576de6ceeaee9773c4a0ee24ced29ebf0e2123c14c56b87e2bef96661a95ef37edc552c29c329a7847b4440b586c80ecbfefc705f96536cf1e42a0aafae7e34b790037bf7927a44c384fb1448da7ea2db5c824e2424a12eb77c251ccd56406ec03496eb17a9fc090dadb0c3752281e26e2bc54becfe5d9f1c3cb862e8c56db42ccb82679f93308f817420c2e7a4a8fa26db369079452044c406fbc581c4fb1d23adf4fd2c838a064a508c6b40fe6dac3876008f939e771a7499b5bf455df96e032e0937a61a4b91109629e0c4a8ec2ac7bae2e5138cd315c430446453b380e5df1d98d70b26ee75b317e05af06a3cd519915f2db8c52ff29740906d6c52bfb88a833d0d37c664"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x108, 0x19, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xc9, 0x20000000, 0x10000, 0x20}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x3e8838a1, 0x5, 0x80000000, 0xa5}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa2, 0x713c47ef, 0x6, 0x10001, 0x20}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7fffffff, 0x20000000, 0x40, 0x8}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x10000000, 0x7, 0x3}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x6ed2, 0x5, 0x6788, 0x4}, 0x4c}}]}, {0x34, 0x6, "5e44aa312d000deafa99cead9e3ca85c478c129909396befad61bb781e71ad2dba8c792afc4d49b645a44ad407abaf69"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5}}}}]}, {0x12c, 0x1, [@m_skbedit={0x128, 0xe, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1f}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}]}, {0xe3, 0x6, "51ae4166309b7911dfbd44a6d5fa7a4110dd606f9c860f80de2ff28be6ed4d19f47b8c0065dac8022334f3225beb3634f4aaad21203fad3d96da8e1bf2e44bc87c7259fb883a3df2b6f5e5eb70deda867cc744ff500ab9c6c978043eab977b506dc2f73464c5833a96977be8ee31d69f3249fd673de05915534a440d4eb7617ff34ad0c904c0d5ef43eb17c0f55e45713ead19b38cbbd47f676e7a874c2019c5df179e9192b0d1dae57fbc6bc23cdeb6239763025e8ae9bda032143987fbaca58589f2c1fae369399dbc458c5a7c866f92998caae14cbe901464f893badb1c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x79c, 0x1, [@m_nat={0x258, 0x1d, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffb2, 0xffffffff, 0x1, 0x2, 0x5}, @rand_addr=0x64010100, @private=0xa010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0x8, 0x100, 0x1}, @loopback, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xbe7, 0x7, 0x1, 0x622c, 0xff}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x1, 0x3, 0x6}, @multicast2, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x6, 0xfffffff7, 0x79}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8000, 0x3, 0x5, 0x292}, @remote, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x101, 0x1, 0x100}, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x4, 0xfffffe01, 0x9}, @remote, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xd138, 0x0, 0x0, 0x9}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1aa3, 0x3, 0x80, 0x7}, @rand_addr=0x64010101, @loopback, 0xff, 0x1}}]}, {0x9e, 0x6, "88cdb5b8144f8f04118340ac35d511b576149ff34a3cfd0f410799d22a5c477cff13bf474d8d189e658f60b221904b0d40314620be0425ae614aa27b88d6dc680dab895f53c359206e6e1c85d5793a39bc9465effe3c98df40d56a7441081962485af81ae71a579d58e09c3253c118aa2c6868d6219649e6cca3efb7e313d0154d44c2aeb98868d5910eb3fa21715b41f7688760829c495a00c1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_nat={0x94, 0x10, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xc3, 0x3, 0x20000000, 0x200, 0x1}, @empty, @empty, 0xff}}]}, {0x42, 0x6, "8403af4259257a70c43c1124869c0b6882f30488589e266975eff1e2cbc951d60c01596e45b32ec321b3800c75b416d30fcbd50712f3f7c7332af0923827"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x68, 0x11, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x2f, 0x6, "908ad166abef6157dc5a71d376a2f6e23503544dd01374861c65a656ebe6ee68d47877406c7f9fe9bb3f7a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xfc, 0x1e, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x3ff, 0xffffffffffffffff, 0x7fffffff, 0x2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xa7, 0x6, "606ffd852e3386d4e1ba0d6fd72d3e092bc260dfece3c6d06e624d04661fe2c4ff9a72d96dd2145d16271e55e522acf843fea0799d64e821a410dd6305edb96b3db807861f1638849d7a484546ff6ebb748ee0581ce237b32a2fe29799eaae545cbc85c62350a71860aecfb89aebb62f1dcbf4e51013670a7d8e878ca7d9751aa23e362bbc59dd158190a3b5da9703a25ad1198f0509d5d9c8dc1ea21cc72b6f747e5f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x50, 0xf, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x16, 0x6, "0c81e5fa54b07a4d1d3b2eed40fdbf50dc29"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x13c, 0x1c, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x3, 0xffffffffeffffffd, 0x3, 0x5c3}, @empty, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x330e, 0x401, 0xffffffffffffffff, 0x8, 0x4}, @broadcast, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x0, 0x3, 0x8a, 0x38}, @multicast2, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x20, 0xb00, 0x1, 0x4, 0x7}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x72, 0x6, "0ea01024bb23ca9cf89b4438de506eb2c3d9b2866f46b39aac397c86aae485c68e2e2d59f7d276762d0bf6798bf9934edcee865d38aa620c0df81aa3014dd4be2dcb3b997d17e26d3d1dd418dc26743c123ae9f7d71c2c93e5b90be369a3fa24356a1c5480c022ba14468d5eeb39"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x170, 0x5, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x8001, 'security\x00', 0x5a, 0xfffa, "4bcde892b6deaddf087c7fcb9f7b5d68055490e9e97a7c478d2b9e9f5d1dbf6192ff53d56292a8b77108b3e193b8e0544ac8422fc1de35fc8d7f2ff5c0d46878a204701ff5e23301a34c08"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffffff}, @TCA_IPT_INDEX={0x8, 0x3, 0xa72}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffff26}]}, {0x8c, 0x6, "398cdb74dfaa0d9bf92ab44b79a7215ce92297eb6e7bef8b871180cf9ef7b9dffc8e53a6c2ab404f2e0e8f0e7a40b753bc8a98f6f76863edc3190598ef49cdae14ddbb66cf88156c4dcdb10ae2f5494c3b13afb89808e1884d6e5f3449e08bfc6160779bea86646cab6518474b67301c6ab8fbdc85d1a0ae0e65a7c4a223d35612e80767b4c98c3e"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mpls={0x4c, 0xd, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xdefe7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x10, 0x6, "315124b5e1259553c3e92660"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x178, 0x1, [@m_bpf={0x88, 0x1b, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xc8f, 0x8, 0xffffffff, 0x1}}]}, {0x47, 0x6, "347d7cbdf6911b1c11d70f6676d9a58d69b4f91e6504f3aa065c6cee024267de14fd8c5735adc3e7ec7617b71da9d0793d9d0f26989e55a23c3474de4ce9284e229ed6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xae5611d4050d86fb, 0x2}}}}, @m_gact={0xec, 0x17, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x130b, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x245a, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a6b, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x7e3, 0x4, 0x7, 0x5}}]}, {0x82, 0x6, "3e230f1c1673124a4bd9d0cb809b30d863b299715c2902916765932c04b1f93a3fa36db64e48ff4ff8c76aaf41aba26d1a49013dcb02150a27691634973a7bafc2c1fc2d78c18aabd83762eeb0658002485f07b95f2fa8f67f038e4bec64ffca83797ce2bdbe44b68a6ed19619382420ff495076c7ace4b1b7742b320973"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x23e4}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04000000"], 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002500), 0x4203, 0x0) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (async) stat(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000002a00)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002640)={0x360, 0x37, 0x400, 0x70bd2b, 0x25dfdbfe, {0x17}, [@nested={0x14, 0x27, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @fd}, @typed={0x8, 0x1b, 0x0, 0x0, @pid=r1}]}, @typed={0xc, 0x8f, 0x0, 0x0, @u64=0x3ff}, @generic="c8c51e957390131db048f925f17dff5bfe41a2f9a188b27b8db1d380a8d999016c410af09d3f12ceab74c7f889a1938496f9181acf2c72c5c6b55a80cca986d5", @nested={0x2be, 0x4e, 0x0, 0x1, [@generic="1beb18963788af9de9ed2de3c338f420edcbb2be2c29462f8a8322cf770cdff28eec8515afe36d977d4c1f64a2c3254e914f3b7f90e4f9678d1c3b44c710999e6eaffb4eb3f35113bbb4d5e59a646a95bc2fe55233801c801c19a968011816e5ffc6ce2d198b0e7b968d582b93cd180a79c3c3639681a388608d37f28a91527534b07a520a3da013bd44a89b78f9ed43e49d12f0ef08bdad9fec87cb9755e5af66015662ab587541e2d2f08eab9787ea0d8998c0e96fce707850031c06475f544ccd7847c68fefeaa7cf246863701769e05aaf62c3c9efd55c90623ff813efc4fe27f3abb501313cb5", @generic="e76b5b8c26b29e4c793e962ad2b30b02627baf8995c6d5cba0be2b86c3f1bf17a975c49b5a27ce0941ca9d6a9b0197122a3aa04e0a10f974f9bd8f9a977b4ee9577f95f1c7f67a4b9269872ba681773515aa04ee3218bd841b98f65d190331975cce64c7c7790e8ff26655e3d303b306a8bf8f6b6a4239c3389ef80453ec976791616efde9530603f36e73d93703eb2de22a", @typed={0x8, 0x19, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="b95176826f09c1b26d4527c55260e08409b593bba61559ed0fcfbeaf6b29c4cd5ba3f0568c1f1438bc570603f676d1747359fd435d4564970e984dd75ba0cbe33bbf890ac49cab9aee40f1d99e", @typed={0x4, 0x34}, @typed={0x8, 0x53, 0x0, 0x0, @uid=r2}, @generic="17bea457347a9c7f4e2f03e44ec2d2069e91be549e16d70f705fa39ab5195a83cc4ae3c43ef24d7d25c3feba4928a31166b503ad2dd9aa4afa5d1e771f925a7b1044ab83565818463deb702bd098b9ee5c5f96c8d806a1a504ad55b780b2e0104617a1033ed000e7763e9cdf7d371c0165ed7fce838776bb0e737154fcea6f68b5e76105f12557688ef007799a37221190f318450f78d86c4de220ded7d11a9b6c44c7962bbd969807a9925a0f90c5d73d35af3bc22f035610e7d5956bf092fa752ffed222ac6c644f251f0d6f3994d80adaa0cbbdd39b8999299f4d9051"]}, @typed={0x8, 0x60, 0x0, 0x0, @fd}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@local}, @nested={0x10, 0x8b, 0x0, 0x1, [@typed={0x8, 0x70, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x3a}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x200040c4}, 0x4000000) 03:57:46 executing program 2: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @mcast2, 0xfc}}, 0x594, 0xbf}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={r0, 0x5, 0x61, "78d2b49c90fa3e750c0424bbd3c0797a818f4ae8c61761b05efb64fa323d6407b784fd2bf5b9fdb7d6d9f2607aa4b1d1bd8a1299741fafa9fa9b2a1a1a0ac359f65f966937d54270fa6c92d10b61247b8ac2ad4b25c451579c9cb7b8fedb644cb1"}, 0x69) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={r0, 0x2}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={r0, 0x1, 0x1ff}, &(0x7f0000000440)=0x8) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) 03:57:46 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0affc8000700ffffffffffffaaaaaaaaaa10aaaaaaa8aa1179000800e80401"], 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0affc8000700ffffffffffffaaaaaaaaaa10aaaaaaa8aa1179000800e80401"], 0x22) (async) 03:57:46 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd9}, "39ea77c5d1ae04dc2164b9e6e1307f12d8ae09f7030851f22872f5ade133bb61ad271bab2ece2ca5f515dbf186acec1e4a72fae652a7244110b55b83a2da6ae8440ea8e529c8053c64e2da1e9b9d8069511c70e76104ecc1abcc0e26ddb3f1e074a0f72c5489ddf5e0c711af96d3404f8a2cd89ec84d12b7ac64b7881b8281e220b53fde9d69f5b556711a8458ceda909d5173de47c86d8eb9d4d0ce9ee46619f94257d48ae338dc4555ba3d3005708b37473435c3f05c51acc34ca140146e652c47807ba5d7742471cdeccf42e10b1f6f1323368a990c7bfa"}, 0xdd) [ 475.510783][ T3662] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 475.566953][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 475.566969][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d [ 475.591859][T12968] FAULT_INJECTION: forcing a failure. [ 475.591859][T12968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.613408][T12968] CPU: 0 PID: 12968 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 475.623856][T12968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 475.633927][T12968] Call Trace: [ 475.637222][T12968] [ 475.640166][T12968] dump_stack_lvl+0xcd/0x134 [ 475.644790][T12968] should_fail.cold+0x5/0xa [ 475.649328][T12968] _copy_from_user+0x2a/0x170 [ 475.654036][T12968] copy_msghdr_from_user+0x89/0x150 [ 475.659262][T12968] ? __copy_msghdr+0x4a0/0x4a0 [ 475.664052][T12968] ? __lock_acquire+0x166e/0x56d0 [ 475.669106][T12968] ___sys_sendmsg+0xdd/0x1b0 [ 475.673706][T12968] ? do_recvmmsg+0x6e0/0x6e0 [ 475.678313][T12968] ? find_held_lock+0x2d/0x110 [ 475.683079][T12968] ? __might_fault+0xd1/0x170 [ 475.687761][T12968] ? lock_downgrade+0x6e0/0x6e0 [ 475.692626][T12968] __sys_sendmmsg+0x18b/0x460 [ 475.697312][T12968] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 475.702347][T12968] ? __ct_user_exit+0xff/0x150 [ 475.707114][T12968] ? lock_downgrade+0x6e0/0x6e0 [ 475.711975][T12968] ? lock_downgrade+0x6e0/0x6e0 [ 475.716836][T12968] ? syscall_enter_from_user_mode+0x22/0xb0 [ 475.722754][T12968] __x64_sys_sendmmsg+0x99/0x100 [ 475.727710][T12968] ? syscall_enter_from_user_mode+0x22/0xb0 [ 475.733628][T12968] do_syscall_64+0x35/0xb0 [ 475.738078][T12968] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 475.743983][T12968] RIP: 0033:0x7f8197a8a669 [ 475.748403][T12968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 475.768015][T12968] RSP: 002b:00007f8198c7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 475.776431][T12968] RAX: ffffffffffffffda RBX: 00007f8197babf80 RCX: 00007f8197a8a669 [ 475.784405][T12968] RDX: 03fffffffffffe36 RSI: 0000000020001e00 RDI: 0000000000000005 [ 475.792378][T12968] RBP: 00007f8198c7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 475.800361][T12968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.808334][T12968] R13: 00007f81980dfb1f R14: 00007f8198c7b300 R15: 0000000000022000 03:57:47 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01eb09000000000000000000000000002100aaaaaaaaaa0000"], 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x3, 0x2}, {0x8000}}}}, 0xf) 03:57:47 executing program 2: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @mcast2, 0xfc}}, 0x594, 0xbf}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={r0, 0x5, 0x61, "78d2b49c90fa3e750c0424bbd3c0797a818f4ae8c61761b05efb64fa323d6407b784fd2bf5b9fdb7d6d9f2607aa4b1d1bd8a1299741fafa9fa9b2a1a1a0ac359f65f966937d54270fa6c92d10b61247b8ac2ad4b25c451579c9cb7b8fedb644cb1"}, 0x69) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={r0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={r0, 0x1, 0x1ff}, &(0x7f0000000440)=0x8) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) 03:57:47 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x141802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000300), 0x0, r3}, 0x68) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r2, 0xee00}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0xcd) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r7, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_getlink={0x50, 0x12, 0x200, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x10000, 0x40000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x8}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @empty}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000050}, 0x80) [ 475.816320][T12968] [ 475.852491][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 475.852521][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d [ 475.869020][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 88) 03:57:47 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01eb09000000000000000000000000002100aaaaaaaaaa0000"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x3, 0x2}, {0x8000}}}}, 0xf) 03:57:47 executing program 2: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @mcast2, 0xfc}}, 0x594, 0xbf}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={r0, 0x5, 0x61, "78d2b49c90fa3e750c0424bbd3c0797a818f4ae8c61761b05efb64fa323d6407b784fd2bf5b9fdb7d6d9f2607aa4b1d1bd8a1299741fafa9fa9b2a1a1a0ac359f65f966937d54270fa6c92d10b61247b8ac2ad4b25c451579c9cb7b8fedb644cb1"}, 0x69) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={r0, 0x1, 0x1ff}, &(0x7f0000000440)=0x8) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dcdde67796b5709d72d7c2c120f8158cfbca9ae71dc5b9659a3bb07bb0800cee6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781fffa94600000000000000de49191a81a4b7c49553f87cffffcc3282138e194c08dd6481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef84865b76a62103207c36832bc97571463d6901325cf13cd56f20506315ca9f32c53b42292baec47d378487af4b2ded13be229ae630cb0323d145887cca3304f0afceec37fd39fc1cca27b0aed0dc24"], 0xcd) 03:57:47 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1204"], 0x10) 03:57:47 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd9}, "39ea77c5d1ae04dc2164b9e6e1307f12d8ae09f7030851f22872f5ade133bb61ad271bab2ece2ca5f515dbf186acec1e4a72fae652a7244110b55b83a2da6ae8440ea8e529c8053c64e2da1e9b9d8069511c70e76104ecc1abcc0e26ddb3f1e074a0f72c5489ddf5e0c711af96d3404f8a2cd89ec84d12b7ac64b7881b8281e220b53fde9d69f5b556711a8458ceda909d5173de47c86d8eb9d4d0ce9ee46619f94257d48ae338dc4555ba3d3005708b37473435c3f05c51acc34ca140146e652c47807ba5d7742471cdeccf42e10b1f6f1323368a990c7bfa"}, 0xdd) 03:57:47 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01eb09000000000000000000000000002100aaaaaaaaaa0000"], 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x3, 0x2}, {0x8000}}}}, 0xf) 03:57:47 executing program 2: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @mcast2, 0xfc}}, 0x594, 0xbf}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={r0, 0x1, 0x1ff}, &(0x7f0000000440)=0x8) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) [ 476.031169][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 476.032847][ T3647] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 476.039864][ T3647] Bluetooth: hci4: Malformed LE Event: 0x0d [ 476.064499][ T3647] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:47 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd9}, "39ea77c5d1ae04dc2164b9e6e1307f12d8ae09f7030851f22872f5ade133bb61ad271bab2ece2ca5f515dbf186acec1e4a72fae652a7244110b55b83a2da6ae8440ea8e529c8053c64e2da1e9b9d8069511c70e76104ecc1abcc0e26ddb3f1e074a0f72c5489ddf5e0c711af96d3404f8a2cd89ec84d12b7ac64b7881b8281e220b53fde9d69f5b556711a8458ceda909d5173de47c86d8eb9d4d0ce9ee46619f94257d48ae338dc4555ba3d3005708b37473435c3f05c51acc34ca140146e652c47807ba5d7742471cdeccf42e10b1f6f1323368a990c7bfa"}, 0xdd) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd9}, "39ea77c5d1ae04dc2164b9e6e1307f12d8ae09f7030851f22872f5ade133bb61ad271bab2ece2ca5f515dbf186acec1e4a72fae652a7244110b55b83a2da6ae8440ea8e529c8053c64e2da1e9b9d8069511c70e76104ecc1abcc0e26ddb3f1e074a0f72c5489ddf5e0c711af96d3404f8a2cd89ec84d12b7ac64b7881b8281e220b53fde9d69f5b556711a8458ceda909d5173de47c86d8eb9d4d0ce9ee46619f94257d48ae338dc4555ba3d3005708b37473435c3f05c51acc34ca140146e652c47807ba5d7742471cdeccf42e10b1f6f1323368a990c7bfa"}, 0xdd) (async) 03:57:47 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1204"], 0x10) 03:57:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 89) 03:57:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', 0x1, 0x1b0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000400)="fb", 0x1) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600), 0x4c0, 0x0) sendmsg$unix(r0, &(0x7f0000001680)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f00000000c0)="bd7193bb85c66fa86a5f60cf219f2ea8ffe0ae323e8e74fedaadd39d93e5a8ff17f55e05d76015b899151b2a11af79c36ff2f6860eb6f9d55f37e0aa84cea1f77cc804d4d419ad1761498019d56e2a9c0ad0989c5f2eb0a42e806f", 0x5b}, {&(0x7f0000000140)="9c0893e2ab13da096e4d2e1c989698534ee59a0180427a0a412ff35363877fafa736f7e25f0ab6c58924411fcec453bd88c354566ecfa57da877d0b41d408106e18536c2b6d91fe0dc1f6b250a11eb143e934ab3066213cc1c826578956a7a2d34e13f736771d9772d01a18a26efbf2232121d4214cf5a06f1bfdb75c035bc850c439a6d0aa0f6c97ee832590f3d1e9f1d38a13916ab7a4671816d999ba2e796cd299935a703d021b37d", 0xaa}, {&(0x7f0000001240)="2b7b1928ed4a3daff01a46ceb900c9e1604f4ea038967cc13a59bd699942e689269d368a3174f71ba3f80ff4982c0da9db1d05e68d1e047bb21a9c3852fd04d6b5732139fc94c6d8216f069c383c87c1d7766ecd4268f2dc1caa2ceacb67019de8b8", 0x62}, {&(0x7f00000012c0)="80188ed687fd60d827a1d2494961578f43e627ea3528f0745b7b5791b5fa5138a8256808d0d374d8828891f6d499155fc3eb6648b97da1fe4c38804b4561a5cdf0192cad92a404a0ffebaf70834619c55ed5214d564faf4a1b2f5f0b18173c61e87fda5c59edc6f50afb2c7ca1625205f173f8141c6847cce9f063fed53017633819d09b288377d782b4b1ac0e040c65474dacc9bc0116997dd03545dd372cf7280ad05fb85c0b118c985fad9c7c058030869b1ac4b370c03412749c08de84d3d45f665537386482c8a4c5e566c9775d52", 0xd1}, {&(0x7f00000013c0)="40a07442f96e78267d22939549500cb320ec1b9581f5ba39e48e7df66d28825ee8dfae07989d57e276a517cd2217241baa1e2bc5793b9f30cd61cd86c6df1d66369db5faee42cbe3f9c225c7813a6d36a12efe4fac3b26dc6056f2ce01acfa3c217eead52203a26664ff36202f5b88c6766a22d07ebcdb68f5e16a39af9c2c07b601f232bd978247c4d12bb3c7de189b57977ea29d7eb6debabf4d344348899022e2", 0xa2}, {&(0x7f0000001480)="d9c07f392926a65c60439e91c5e018810731e404", 0x14}, {&(0x7f00000014c0)="25eff2ef7c05a2e3fc8dc59cc14c9857184eb0c095d9847c12133bb07212186b6b8f7ba9d7e65dac9bb3871fcfce8f23c24456f620b5724c35f547312114211e41df005c1eb52097dcd7e2e484", 0x4d}], 0x8, &(0x7f0000001640)=[@rights={{0x24, 0x1, 0x1, [r2, r3, r4, r5, 0xffffffffffffffff]}}], 0x28, 0x4000001}, 0x24000841) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) [ 476.170103][ T3647] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 476.170869][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 476.177825][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d [ 476.179434][ T3647] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 476.241943][ T3647] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:48 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x141802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000300), 0x0, r3}, 0x68) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r2, 0xee00}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0xcd) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r7, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_getlink={0x50, 0x12, 0x200, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x10000, 0x40000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x8}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @empty}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000050}, 0x80) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) (async) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x141802, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000300), 0x0, r3}, 0x68) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r2, 0xee00}}, './file0\x00'}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0xcd) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r7, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_getlink={0x50, 0x12, 0x200, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x10000, 0x40000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x8}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @empty}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000050}, 0x80) (async) 03:57:48 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9, 0x41}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:57:48 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x1, 0x1ff}, &(0x7f0000000440)=0x8) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) 03:57:48 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1204"], 0x10) 03:57:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 90) 03:57:48 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x1, 0x1ff}, &(0x7f0000000440)=0x8) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) [ 476.703821][ T3647] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 476.706973][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 476.711384][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d [ 476.733095][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:48 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001200)={0x60, 0x0, &(0x7f0000001100)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001080)={@fda={0x66646185, 0x3, 0x1, 0x22}, @flat=@weak_handle={0x77682a85, 0xe, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/4096, 0x1000, 0x2, 0x1d}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}, @increfs, @clear_death={0x400c630f, 0x3}, @enter_looper], 0x6c, 0x0, &(0x7f0000001180)="34df344d9a5e2c8d3ffd0746b031974a2848db353eed23d4029f2e9bb9ad02ba8dc9b8c910df5654f58ef8d18e880be3d279669316065df230231457faa4d6f11d55965d7b314c7e16f529fb641189e574a084ab697fa133f1811371f1463a042008add8a23505db8d4768b0"}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="003e0d04"], 0x10) 03:57:48 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000440)) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) 03:57:48 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9, 0x41}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:57:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 91) [ 476.748420][ T3658] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 476.754891][ T3658] Bluetooth: hci3: hardware error 0xff [ 476.757546][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:48 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) [ 476.811440][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d [ 476.845504][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d [ 476.864890][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 476.922060][T13051] FAULT_INJECTION: forcing a failure. [ 476.922060][T13051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.943300][T13051] CPU: 1 PID: 13051 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 476.953747][T13051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 476.963816][T13051] Call Trace: [ 476.967099][T13051] [ 476.970038][T13051] dump_stack_lvl+0xcd/0x134 [ 476.974658][T13051] should_fail.cold+0x5/0xa [ 476.979193][T13051] _copy_from_user+0x2a/0x170 [ 476.983898][T13051] copy_msghdr_from_user+0x89/0x150 [ 476.989125][T13051] ? __copy_msghdr+0x4a0/0x4a0 [ 476.993902][T13051] ? __lock_acquire+0x166e/0x56d0 [ 476.998949][T13051] ___sys_sendmsg+0xdd/0x1b0 [ 477.003556][T13051] ? do_recvmmsg+0x6e0/0x6e0 [ 477.008158][T13051] ? find_held_lock+0x2d/0x110 [ 477.012914][T13051] ? __might_fault+0xd1/0x170 [ 477.017583][T13051] ? lock_downgrade+0x6e0/0x6e0 [ 477.022447][T13051] __sys_sendmmsg+0x18b/0x460 [ 477.027135][T13051] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 477.032174][T13051] ? __ct_user_exit+0xff/0x150 [ 477.036933][T13051] ? lock_downgrade+0x6e0/0x6e0 [ 477.041782][T13051] ? lock_downgrade+0x6e0/0x6e0 [ 477.046654][T13051] ? syscall_enter_from_user_mode+0x22/0xb0 [ 477.052539][T13051] __x64_sys_sendmmsg+0x99/0x100 [ 477.057463][T13051] ? syscall_enter_from_user_mode+0x22/0xb0 [ 477.063353][T13051] do_syscall_64+0x35/0xb0 [ 477.067773][T13051] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 477.073654][T13051] RIP: 0033:0x7f8197a8a669 [ 477.078099][T13051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 477.097694][T13051] RSP: 002b:00007f8198c7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 477.106090][T13051] RAX: ffffffffffffffda RBX: 00007f8197babf80 RCX: 00007f8197a8a669 [ 477.114045][T13051] RDX: 03fffffffffffe36 RSI: 0000000020001e00 RDI: 0000000000000005 03:57:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', 0x1, 0x1b0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000400)="fb", 0x1) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600), 0x4c0, 0x0) sendmsg$unix(r0, &(0x7f0000001680)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f00000000c0)="bd7193bb85c66fa86a5f60cf219f2ea8ffe0ae323e8e74fedaadd39d93e5a8ff17f55e05d76015b899151b2a11af79c36ff2f6860eb6f9d55f37e0aa84cea1f77cc804d4d419ad1761498019d56e2a9c0ad0989c5f2eb0a42e806f", 0x5b}, {&(0x7f0000000140)="9c0893e2ab13da096e4d2e1c989698534ee59a0180427a0a412ff35363877fafa736f7e25f0ab6c58924411fcec453bd88c354566ecfa57da877d0b41d408106e18536c2b6d91fe0dc1f6b250a11eb143e934ab3066213cc1c826578956a7a2d34e13f736771d9772d01a18a26efbf2232121d4214cf5a06f1bfdb75c035bc850c439a6d0aa0f6c97ee832590f3d1e9f1d38a13916ab7a4671816d999ba2e796cd299935a703d021b37d", 0xaa}, {&(0x7f0000001240)="2b7b1928ed4a3daff01a46ceb900c9e1604f4ea038967cc13a59bd699942e689269d368a3174f71ba3f80ff4982c0da9db1d05e68d1e047bb21a9c3852fd04d6b5732139fc94c6d8216f069c383c87c1d7766ecd4268f2dc1caa2ceacb67019de8b8", 0x62}, {&(0x7f00000012c0)="80188ed687fd60d827a1d2494961578f43e627ea3528f0745b7b5791b5fa5138a8256808d0d374d8828891f6d499155fc3eb6648b97da1fe4c38804b4561a5cdf0192cad92a404a0ffebaf70834619c55ed5214d564faf4a1b2f5f0b18173c61e87fda5c59edc6f50afb2c7ca1625205f173f8141c6847cce9f063fed53017633819d09b288377d782b4b1ac0e040c65474dacc9bc0116997dd03545dd372cf7280ad05fb85c0b118c985fad9c7c058030869b1ac4b370c03412749c08de84d3d45f665537386482c8a4c5e566c9775d52", 0xd1}, {&(0x7f00000013c0)="40a07442f96e78267d22939549500cb320ec1b9581f5ba39e48e7df66d28825ee8dfae07989d57e276a517cd2217241baa1e2bc5793b9f30cd61cd86c6df1d66369db5faee42cbe3f9c225c7813a6d36a12efe4fac3b26dc6056f2ce01acfa3c217eead52203a26664ff36202f5b88c6766a22d07ebcdb68f5e16a39af9c2c07b601f232bd978247c4d12bb3c7de189b57977ea29d7eb6debabf4d344348899022e2", 0xa2}, {&(0x7f0000001480)="d9c07f392926a65c60439e91c5e018810731e404", 0x14}, {&(0x7f00000014c0)="25eff2ef7c05a2e3fc8dc59cc14c9857184eb0c095d9847c12133bb07212186b6b8f7ba9d7e65dac9bb3871fcfce8f23c24456f620b5724c35f547312114211e41df005c1eb52097dcd7e2e484", 0x4d}], 0x8, &(0x7f0000001640)=[@rights={{0x24, 0x1, 0x1, [r2, r3, r4, r5, 0xffffffffffffffff]}}], 0x28, 0x4000001}, 0x24000841) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', 0x1, 0x1b0) (async) pipe(&(0x7f0000000080)) (async) write(r4, &(0x7f0000000400)="fb", 0x1) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600), 0x4c0, 0x0) (async) sendmsg$unix(r0, &(0x7f0000001680)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f00000000c0)="bd7193bb85c66fa86a5f60cf219f2ea8ffe0ae323e8e74fedaadd39d93e5a8ff17f55e05d76015b899151b2a11af79c36ff2f6860eb6f9d55f37e0aa84cea1f77cc804d4d419ad1761498019d56e2a9c0ad0989c5f2eb0a42e806f", 0x5b}, {&(0x7f0000000140)="9c0893e2ab13da096e4d2e1c989698534ee59a0180427a0a412ff35363877fafa736f7e25f0ab6c58924411fcec453bd88c354566ecfa57da877d0b41d408106e18536c2b6d91fe0dc1f6b250a11eb143e934ab3066213cc1c826578956a7a2d34e13f736771d9772d01a18a26efbf2232121d4214cf5a06f1bfdb75c035bc850c439a6d0aa0f6c97ee832590f3d1e9f1d38a13916ab7a4671816d999ba2e796cd299935a703d021b37d", 0xaa}, {&(0x7f0000001240)="2b7b1928ed4a3daff01a46ceb900c9e1604f4ea038967cc13a59bd699942e689269d368a3174f71ba3f80ff4982c0da9db1d05e68d1e047bb21a9c3852fd04d6b5732139fc94c6d8216f069c383c87c1d7766ecd4268f2dc1caa2ceacb67019de8b8", 0x62}, {&(0x7f00000012c0)="80188ed687fd60d827a1d2494961578f43e627ea3528f0745b7b5791b5fa5138a8256808d0d374d8828891f6d499155fc3eb6648b97da1fe4c38804b4561a5cdf0192cad92a404a0ffebaf70834619c55ed5214d564faf4a1b2f5f0b18173c61e87fda5c59edc6f50afb2c7ca1625205f173f8141c6847cce9f063fed53017633819d09b288377d782b4b1ac0e040c65474dacc9bc0116997dd03545dd372cf7280ad05fb85c0b118c985fad9c7c058030869b1ac4b370c03412749c08de84d3d45f665537386482c8a4c5e566c9775d52", 0xd1}, {&(0x7f00000013c0)="40a07442f96e78267d22939549500cb320ec1b9581f5ba39e48e7df66d28825ee8dfae07989d57e276a517cd2217241baa1e2bc5793b9f30cd61cd86c6df1d66369db5faee42cbe3f9c225c7813a6d36a12efe4fac3b26dc6056f2ce01acfa3c217eead52203a26664ff36202f5b88c6766a22d07ebcdb68f5e16a39af9c2c07b601f232bd978247c4d12bb3c7de189b57977ea29d7eb6debabf4d344348899022e2", 0xa2}, {&(0x7f0000001480)="d9c07f392926a65c60439e91c5e018810731e404", 0x14}, {&(0x7f00000014c0)="25eff2ef7c05a2e3fc8dc59cc14c9857184eb0c095d9847c12133bb07212186b6b8f7ba9d7e65dac9bb3871fcfce8f23c24456f620b5724c35f547312114211e41df005c1eb52097dcd7e2e484", 0x4d}], 0x8, &(0x7f0000001640)=[@rights={{0x24, 0x1, 0x1, [r2, r3, r4, r5, 0xffffffffffffffff]}}], 0x28, 0x4000001}, 0x24000841) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) 03:57:48 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) 03:57:48 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x141802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000300), 0x0, r3}, 0x68) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r2, 0xee00}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0xcd) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) (async) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r7, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_getlink={0x50, 0x12, 0x200, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x10000, 0x40000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x8}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @empty}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000050}, 0x80) 03:57:48 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9, 0x41}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9, 0x41}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 03:57:48 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001200)={0x60, 0x0, &(0x7f0000001100)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001080)={@fda={0x66646185, 0x3, 0x1, 0x22}, @flat=@weak_handle={0x77682a85, 0xe, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/4096, 0x1000, 0x2, 0x1d}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}, @increfs, @clear_death={0x400c630f, 0x3}, @enter_looper], 0x6c, 0x0, &(0x7f0000001180)="34df344d9a5e2c8d3ffd0746b031974a2848db353eed23d4029f2e9bb9ad02ba8dc9b8c910df5654f58ef8d18e880be3d279669316065df230231457faa4d6f11d55965d7b314c7e16f529fb641189e574a084ab697fa133f1811371f1463a042008add8a23505db8d4768b0"}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="003e0d04"], 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001200)={0x60, 0x0, &(0x7f0000001100)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001080)={@fda={0x66646185, 0x3, 0x1, 0x22}, @flat=@weak_handle={0x77682a85, 0xe, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/4096, 0x1000, 0x2, 0x1d}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}, @increfs, @clear_death={0x400c630f, 0x3}, @enter_looper], 0x6c, 0x0, &(0x7f0000001180)="34df344d9a5e2c8d3ffd0746b031974a2848db353eed23d4029f2e9bb9ad02ba8dc9b8c910df5654f58ef8d18e880be3d279669316065df230231457faa4d6f11d55965d7b314c7e16f529fb641189e574a084ab697fa133f1811371f1463a042008add8a23505db8d4768b0"}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="003e0d04"], 0x10) (async) [ 477.122012][T13051] RBP: 00007f8198c7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 477.129982][T13051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.137939][T13051] R13: 00007f81980dfb1f R14: 00007f8198c7b300 R15: 0000000000022000 [ 477.145907][T13051] 03:57:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 92) [ 477.190496][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 477.200729][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 477.202305][ T3647] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:48 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001200)={0x60, 0x0, &(0x7f0000001100)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001080)={@fda={0x66646185, 0x3, 0x1, 0x22}, @flat=@weak_handle={0x77682a85, 0xe, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/4096, 0x1000, 0x2, 0x1d}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}, @increfs, @clear_death={0x400c630f, 0x3}, @enter_looper], 0x6c, 0x0, &(0x7f0000001180)="34df344d9a5e2c8d3ffd0746b031974a2848db353eed23d4029f2e9bb9ad02ba8dc9b8c910df5654f58ef8d18e880be3d279669316065df230231457faa4d6f11d55965d7b314c7e16f529fb641189e574a084ab697fa133f1811371f1463a042008add8a23505db8d4768b0"}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="003e0d04"], 0x10) 03:57:48 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "e4516e3fad20a0ce028d32d3475bb3d97fc85f799ead9b404c951d94deef160729d6064ea3cb7cea85b82e8ef60412a146177b5ccc7033bb356183722d8935e3976c84b2add2de44551dcf91eff976f53e5d1bf13500dc018c88c5bfde535ff44cfefd33466b6597d889ab73197a5309fcfbb24ae97b7aa66f4da33119b7d6e0c3831fc556eb25e9a0e5030919b75b53d14ab48cf99edcaba780ac81cb60111fb4ea49f7b8e6ddc58e5d46fcd56c924d8c8fd91592e91e2c56ac445d2b4fd5bf6dd3139f3faded6a849bb27532df41b90e9c7a94f84d78f57894c052c4f89e315fbeadaea4503d81e680eeb7f64c4783262eca488911eb4084bfde539b372cb50b716b147562084954dfd2601ba504cf58636346edb717a4d7547f5a463c09950d3a2a0da0ba58ca0e783a12aab9e19cb415f451c19eb1ce92aafa3e445187b47cb0ffbf6b74565c833b9ee75507a7d08118d5d6cf1eba3f4941de7a5dfd2054a82f3e8f912d2c318b697da687f002f6c78d4e875f1e0a2de5ea4157d8d1026f8c7eddd300285918106402faa2343c2eae9d14bc16cac96cb20d74bcddea86fa383764adce5173668fdf5df2d6859d42242575813eec1ca1b5ebaff2bf210ed362fbf4055d1264c304cad0b52a171e17a178f282b262e378049116ad3ef0a25867f41569d131574ba1ab58af7fe35513dce1d3c8899e0dbea6c5c4964856819e8f33e1ace878983b8bfce57ff1533317c97ebc47c06447accde0af26572dff95d7e224af88f97e22e23b55327869190e503d63b1b196d143df86fb8aa08bcec3529e85d04c828a6c0b09177a03d5f87247573bea01e31b3152c2f28a06422f8c22ef5783f670edbdcd7b1526d610d79f1c08a9dd3c2d6d79c7a8fe5c969df82ccdcedcf253db0890e61378375bea72498607daa94433e48f7994d72f83d718d49b3250c18ef50f1e89819e63b654dfc457532899aeab53ffee549f3c46357aea402259bbeda483f42a615fc86d132b0bce1446de80d7b9d410a8fcea6d00f8e29ac03e496dd74c835e079a30659a4374a31c800e07adddfecc4e2c231090020afe25d88baf67649c1cedc29903dba30e2d6849739506a4eee7cf5911cec613a1eadd1efbf4adcfcc488055e20698e60e3152771dfc01eff7b6a28d1a2b169a78cdfeeb0801ee17b8c3ce3ef1d7e80ff4f21de70ee138c20e2be95db3b2308a04e4b36bb14d0a2c6f1125230e2f0a1188ef8636443a0e14c5114dd65b63e0a6e4da47154a9795f87cf101bba8157739ac42c11f9e9005aa9a3ae152bc88e39eeff986c6461e9a9067ca177c2c362ba899ec71081fdf4834586068fbfb61d6a888f395e2bac6dadcde696cfb262d482c42788fa9b8d9f8d269de6bb937996f83b789ace84607daefca3913a29f1ea92fa67fae7d55133744fe91d2c4771aeb957bab07ca4e5f7b136cde2a4103a9aed2273074a71778cb081a87cbe081bb11ae0609216ea686facaa9b9b8858329edddb51add60d05dd725d35d5f2d94d2a9f14e0247bc484f544d90a30e520cfd812a765aa1c674a60fadbe7e8764864758869e28d3c9cf877a734e0a11694e07e5485482a0fa2b1595b7fa50c04c7a3b2fa0e96b1435bf3eb930f600677f4ec57ceef7213ef8c7e069d8d703ed8c5b34e33a8c4bc7926c201a71b6a4525b56918156e6463570c82939cce22abda2826e66b7cb8944f4ff8fcc0502d3758ed20c3876c4919d731fe83454a38668c891c32575f9105581fd94e288b97c57a215210cb909be64552c79eb69695e10422676377dcbd9d06f0b4a2255cd7f30367acbfaafeccfd4a078f9b27a02c17d67873923991349892f94bcfbbf327be6944d95e61c7d1a4f00ef7d40cfdb51b6a2f28421cf77765826cea8a95b84dbf88f922f151d946b8255c3f62d531adfd031639c008b289c332c75dc0babc9ac40216861eb66b30771475fd62b695b1e642338141b873332a09beed9e561007aa6a25313223dd23ce33232c02db0e6998d81aa6560f5bcf50c46fab5f8219ca641de634343d82ca932d674a4e3299da002050d871c853a99b1e7bdd356a9dd084dcbd28d80eea751bf882e0da491174fa9d1f1b2b31c500ca6e70ab4e0b045a54111de08fdd2b7ba30f312023f7dc39acf132bf8c0fbb38f84aa74c709523481db3d79511fd06a3ce1f04f547e7bb6367b2c97507482a282b28f6653d690e46fbda494d0656511a2f342098c8e659e9e351d2dbd189ea629029607c96d0b08eef455c19cb3c74f26f3ad3a06eca8ec569f6faa7dc491c99c35d1b53e0a9a314421d3da116f27bb9c434ba541e42533948cc1dd7910f170d57517ce5aa1d52313a3e74c25f2d0a1109371f8c5ffb8bf5fa73a74fc05714019f82c81860ebe54f5ec9a7f2b8fd74f5dbb81ed0962b79f230bc726bcc9e2000073015dee173133af0a500df3cf7108da93dcfd538a50f99e55c807012d695abb867fc7e73d9b917fcef8976ea1aa3d8f046ec8748db8b432319d46c243891d7f4c9c142c73f62215f625a5ad4ea641e9004dd4ad93ec7df1235dabdf09eb59ae31e17f1c59804e2cc44e39cfc7381340f5d1789ba77a174d384e67ba465e766624f0d7ec1447e1f5414a3f3a76215c0a7f2f0ff232d66a19301accf81a7ea11f96fef75d5bba281d8c193ba42cb0609e3cadca67b90d5bafaca90cfdaa837144ccd807a10017a01929d956c4968d0cc0d565950e297c27d9b6966b6df46a46f9376219a2218393b7ef3a698a1a9adcc26fbc22afda289e24264f377fb7b873838a315df9b52c63df45732912237dea7248d3d88958734f97d24265287a02a4a97581b6e2b48bcba041a8dc293fffa63deeb93ff49824351f00795df7645ea04ad6fe23c196295ef51195e08a9b70334f56c141f7551097241b04adc233883ff2d0be202a5671f5cabdf6ea2ccdb03c19375fee24ad71d0f8fdb601edec1744ba270086594bed1f595e1757658cfe19a65a36f2176ad8e1b1096d43ff3529b1e1b5f4f6194567574556aa6bebc984bb830fe55276d812f0a349246aaf26cf33122da301a1f89e7c195340797163bc266487d66496069fb5d63756976f623db70f56dc2e021a326b1b2e77331f35439039a67168064b0dd9332799b72e1be336119324fb2c490b6dbff80161a6a67354b7ce2f72421ee8c1efa122ed390394526089162d795e7c86f37f1e6757f81c13371a6e47b59b73eb72dab5a5e19a7f199e6970404eb3ed1921b97fa5edceb4bb5ccbc4078678354d69bd3751aa6d9b71a651b3af592889c0a17529f77d343b62d2cfce11aa7b50104a93c4f71795286cc398fe472cbf3ff09ff09525a29729a74928ef741311ff2050f6a5d99befa97d66436e63660d8ceed8d7ae1a91a57712b22e89a18a06c2597ba2028974d62232ec648f01acf7273eb5f283f431e8390f29e4a53ea81b0febb568bbfac0cfd9224a555ec279dde894f72076910d90bf48373e66cf61d8844b9c35fa704d9ed66227389dcec4c0732b664c633de4de7c8173bf5e8bb439a5bb196805ff0b2a17b8218fd6d07359bf02eac9f8e684c7105427c51e2557f585563d89eb8c5cc23f154a9a341068382e2bdaad4440bf7c7642885a8b1f1a7651114071f0ff5da54237468d29bdbcb2dc1592dde6497428570eb979293c08cc772192e3db517280d8e5d85485b1c63647f051f36fed37173b655a7cd8f3e051f55ff1184e8c890037747d474bb00b3d70f531e5d72f740c22f9d3278466b977a4b109dc84714e1ae56ae3704eb4f8fcfc8d16718c2e5725133b694c52b3af1ec7203b6cf370e0492df4372a6afe8a953b694accbf2087bee87f7d8048752d51bf999d646376c73642a0fd2b358014c830c9a146a1e639d15959710c8a13a7d6b117758bb71363b3128faf17c0008453b6be0e59e27762c7507c3ff7f36cd6120f953941606749c17f20ab04f3213f8960a084b5bc0ac19f5278bbbb023a5c761262527464725ca3b388d6ac55b86826e3100a42d297a6d0faf90676006bdba573cbb7b4ca204d097ab797d0a7a29b85526aa1b14b334a8e930f00469b3a4c3a21b9cb07995188b730dacecbbc26a6cd6b171871be3b5a3dbc9440414fd129418adab26937829c107dc94a87d6dd8e4237452733d401a5897cb739b181f930490c4621db69a4c47f92d6d468947e73ef0e6610d19295080af0771c279f7d108ab68b60f0a65b0f303b4ec3ece4af83ba3f97704c7ff51b3e49f4cf87cdc087d722ab6ba4cf16bd5c0445bd010e370ace146709f87fe8fb9dc33b735555691b943f6c26ca54a2463bea9ad19dba6d49bfa706b5b0d26ef80809b65e12d355fac3d5fcd67f2509a898027ab0598ac7fbcfa179aeb5b14951d825264735380af20de1fc790f41dec1be881b88dc4774c59aa75d95b09b4ee75e5da27db6f6ff9821db90f48c3da7f589a3ddaa345704737b65fb67104758cdfff9b8355aead69cf7dfab8809701be09d75032169fe0c8405561cb799b3acaaf41f374373c3dfa90664ca29028446817d6f540cbf62482f773a5e3a90c9a0bb00e4ec53ac5b74d0684e007f5f5d1c96407e6dbe68d8aabb807fe871371f1b67322a0f7547529d26276b4974f5becd0f00a82c651d3cc6bc8365381cf8d2263bd1986d9110b4be55d2ee50d4fc685f322991fb65dd53e0fe56fd8a38e6eadc602fbb681b1a13e8be0958446b192699a53ba907e29492e81e2a8c774277665fdb02f274863b6d329dade6160465c815fc6467d43d0835bc5ea8ccf0565c86a3a5113ac7137c481e87d430e19ef617e510667e09a671d73589f8c26045b097ff4748015f99ac6fb37a85ddb76fcb83a3fc8187cf658b1253fd8008e9ed5ba116ebdb967b7a22d5dab1f7d10ed182b901b525acb608ea165f64fc71067b7435ced5158d6f9ba8faae8251310565d3e25157ebdab3b80fd201423b7f67713d9ab85953d4beaf0d3a01eb455b3251a8babc2ce5fb74964c25e0df5e6d937c48f763578cb8e2dde7176d10c9ca8614859c97a6cda76cd5258f28ad6438ff216692716922a1ae22045b646ab5e25d7adf41fa0d9c7e7e54ffc996a2fea1c991ea0e42d7ee30788fb0541ac040d6f81b128d24bbdf47af7595737800b214ef0e834ec4b3c0a0db29937151519d15f2baabfecddf90ac0c65ceea92dd2edbe692716410ed1a1ddd1b79c6d1f95ef598e06bba3f974ac2b2b824736a821bfe8b6d2114d57c21a8cf049d950460de7d81f82f3a62d474f61f57c1969b75585567be6dd1a15f12c7296dfeeaae80408d6592b81b2a5779f237a3f2ac6d29e74d9816ac2cb05051a4100da2e66ff921e60871e2597b55cf57f628ad1abe07426112cc045465b04b1d3ee85a2ccfe744289695018f79e1c6e1c5a2402f47e54a270417dd2658978abafa18319a5f90fb64b75e7e8229b1e8905f16fbaf16e5ea9d549599faa82d37abf4c6a69cefbe0d4815be4fb81e43801b9596cb77119d2578f2f0ed39c9f5534dd9c02a53c84aef02e8ec77e380ee44bc06b87d7470a84e274ed8a5875ffd9af8c72679b6a99b357346ffb80a0a4b97210072ae61e4fc86d5381047ca954289be49ee26561117693202f135371139e3f5e5d73a5af4ad2ccfd3dd7fd3e0740f3b0a9ca0df1d6fa53af45dd652e108de1c6d9a453474a742a0d21629b7627359d98ce412a526f3079fbd64994f2831d820099b1ff5e3f0010bd46412f94556ec4ad118fe88cbb6d950329486060a8a5d0225"}, 0x1004) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xf5}, "f937dc7d85a73f6d50fd9a5b401deefd5056268d28ac4241eb877c4e2ba0c55db6b30faafb62f97cae3987db67ac8d788d84df969dbf22ff4f52002c82ef244f7ee84da38ff3de0b14e1df258baca22d19a095fb7b194cc7f00f58a73cff04310efae2f87c0fb0b0c6c82224d27ef14b9d6b85758a3934de619e57c32c59418640f9ead2d9be1f79488bab91c21f897fdc4cb270211ca1d88632bc4c4b8bcc65c2e740fb25bb38e661162dd39cdb803dd1694fac350c91b0587d2842f1930cde796ecc49d9a725a6312456c26d8304039e75cdb94d0ca192af99fd240b400f9f6527661d51866f2314ac3ad259bedd5d26f627de81"}, 0xf9) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:57:48 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000040)=@ethernet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/243, 0xf3}], 0x5, &(0x7f0000001700)=""/69, 0x45}, 0x10000) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x6, 0x40, 0x21, 0x2}}}, 0xa) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x7, 0xc9, 0x80}}}, 0x7) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x3, 0xc8, 0x59}}}, 0x8) 03:57:48 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dcdde67796b5709d72d7c2c120f8158cfbca9ae71dc5b9659a3bb07bb0800cee6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781fffa94600000000000000de49191a81a4b7c49553f87cffffcc3282138e194c08dd6481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef84865b76a62103207c36832bc97571463d6901325cf13cd56f20506315ca9f32c53b42292baec47d378487af4b2ded13be229ae630cb0323d145887cca3304f0afceec37fd39fc1cca27b0aed0dc24"], 0xcd) 03:57:48 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000040)=@ethernet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/243, 0xf3}], 0x5, &(0x7f0000001700)=""/69, 0x45}, 0x10000) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a78046cd939176ebe75de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e31d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc975f554c95d4ea79f423cca6b8b13d968dc59a8bf77239118216bd18b9ea4366e4f8d003fc87b97843491b24434ff4f36d1203acd5b317578423c6143c332c9e047127001f4e48c063c4ea279d1da5fe9d23f12e00ee67f9ff17df0aec50e35dccc9157f36c52aa1b149b63512aeaadca6c8e7838074203cb368790d24e72f109dfe76017a6dba0dd2709"], 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x6, 0x40, 0x21, 0x2}}}, 0xa) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x7, 0xc9, 0x80}}}, 0x7) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x3, 0xc8, 0x59}}}, 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000040)=@ethernet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/243, 0xf3}], 0x5, &(0x7f0000001700)=""/69, 0x45}, 0x10000) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x6, 0x40, 0x21, 0x2}}}, 0xa) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x7, 0xc9, 0x80}}}, 0x7) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x3, 0xc8, 0x59}}}, 0x8) (async) 03:57:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', 0x1, 0x1b0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000400)="fb", 0x1) (async) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600), 0x4c0, 0x0) sendmsg$unix(r0, &(0x7f0000001680)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f00000000c0)="bd7193bb85c66fa86a5f60cf219f2ea8ffe0ae323e8e74fedaadd39d93e5a8ff17f55e05d76015b899151b2a11af79c36ff2f6860eb6f9d55f37e0aa84cea1f77cc804d4d419ad1761498019d56e2a9c0ad0989c5f2eb0a42e806f", 0x5b}, {&(0x7f0000000140)="9c0893e2ab13da096e4d2e1c989698534ee59a0180427a0a412ff35363877fafa736f7e25f0ab6c58924411fcec453bd88c354566ecfa57da877d0b41d408106e18536c2b6d91fe0dc1f6b250a11eb143e934ab3066213cc1c826578956a7a2d34e13f736771d9772d01a18a26efbf2232121d4214cf5a06f1bfdb75c035bc850c439a6d0aa0f6c97ee832590f3d1e9f1d38a13916ab7a4671816d999ba2e796cd299935a703d021b37d", 0xaa}, {&(0x7f0000001240)="2b7b1928ed4a3daff01a46ceb900c9e1604f4ea038967cc13a59bd699942e689269d368a3174f71ba3f80ff4982c0da9db1d05e68d1e047bb21a9c3852fd04d6b5732139fc94c6d8216f069c383c87c1d7766ecd4268f2dc1caa2ceacb67019de8b8", 0x62}, {&(0x7f00000012c0)="80188ed687fd60d827a1d2494961578f43e627ea3528f0745b7b5791b5fa5138a8256808d0d374d8828891f6d499155fc3eb6648b97da1fe4c38804b4561a5cdf0192cad92a404a0ffebaf70834619c55ed5214d564faf4a1b2f5f0b18173c61e87fda5c59edc6f50afb2c7ca1625205f173f8141c6847cce9f063fed53017633819d09b288377d782b4b1ac0e040c65474dacc9bc0116997dd03545dd372cf7280ad05fb85c0b118c985fad9c7c058030869b1ac4b370c03412749c08de84d3d45f665537386482c8a4c5e566c9775d52", 0xd1}, {&(0x7f00000013c0)="40a07442f96e78267d22939549500cb320ec1b9581f5ba39e48e7df66d28825ee8dfae07989d57e276a517cd2217241baa1e2bc5793b9f30cd61cd86c6df1d66369db5faee42cbe3f9c225c7813a6d36a12efe4fac3b26dc6056f2ce01acfa3c217eead52203a26664ff36202f5b88c6766a22d07ebcdb68f5e16a39af9c2c07b601f232bd978247c4d12bb3c7de189b57977ea29d7eb6debabf4d344348899022e2", 0xa2}, {&(0x7f0000001480)="d9c07f392926a65c60439e91c5e018810731e404", 0x14}, {&(0x7f00000014c0)="25eff2ef7c05a2e3fc8dc59cc14c9857184eb0c095d9847c12133bb07212186b6b8f7ba9d7e65dac9bb3871fcfce8f23c24456f620b5724c35f547312114211e41df005c1eb52097dcd7e2e484", 0x4d}], 0x8, &(0x7f0000001640)=[@rights={{0x24, 0x1, 0x1, [r2, r3, r4, r5, 0xffffffffffffffff]}}], 0x28, 0x4000001}, 0x24000841) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) 03:57:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 93) 03:57:48 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xf5}, "f937dc7d85a73f6d50fd9a5b401deefd5056268d28ac4241eb877c4e2ba0c55db6b30faafb62f97cae3987db67ac8d788d84df969dbf22ff4f52002c82ef244f7ee84da38ff3de0b14e1df258baca22d19a095fb7b194cc7f00f58a73cff04310efae2f87c0fb0b0c6c82224d27ef14b9d6b85758a3934de619e57c32c59418640f9ead2d9be1f79488bab91c21f897fdc4cb270211ca1d88632bc4c4b8bcc65c2e740fb25bb38e661162dd39cdb803dd1694fac350c91b0587d2842f1930cde796ecc49d9a725a6312456c26d8304039e75cdb94d0ca192af99fd240b400f9f6527661d51866f2314ac3ad259bedd5d26f627de81"}, 0xf9) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 477.316641][ T3647] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:48 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xfda}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) [ 477.362111][ T3647] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:48 executing program 1: r0 = semget(0x0, 0x7, 0x622) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000100)=0x1000) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000001c0)=""/225) r1 = msgget$private(0x0, 0x93) msgrcv(r1, &(0x7f0000001580)={0x0, ""/4096}, 0x1004, 0x3, 0x1000) msgsnd(r1, &(0x7f00000025c0)={0x1, "882be1ceb94a262cbddba8bcb68947fa7de92a1c7c49d3e03e5d7860fa5ecaaa2b"}, 0x25, 0x800) msgrcv(r1, &(0x7f00000002c0)={0x0, ""/184}, 0xc0, 0x0, 0x1000) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000000)=""/156) semop(r0, &(0x7f00000000c0)=[{0x519727cbfc1443d9, 0x7, 0x800}, {0x3, 0x5}], 0x2) 03:57:48 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000040)=@ethernet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/243, 0xf3}], 0x5, &(0x7f0000001700)=""/69, 0x45}, 0x10000) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x6, 0x40, 0x21, 0x2}}}, 0xa) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x7, 0xc9, 0x80}}}, 0x7) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x3, 0xc8, 0x59}}}, 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000040)=@ethernet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/243, 0xf3}], 0x5, &(0x7f0000001700)=""/69, 0x45}, 0x10000) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x6, 0x40, 0x21, 0x2}}}, 0xa) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x7, 0xc9, 0x80}}}, 0x7) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x3, 0xc8, 0x59}}}, 0x8) (async) [ 477.450872][ T3647] Bluetooth: hci4: Malformed LE Event: 0x0d [ 477.469209][ T3647] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 477.470802][T13093] FAULT_INJECTION: forcing a failure. [ 477.470802][T13093] name fail_usercopy, interval 1, probability 0, space 0, times 0 03:57:48 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dcdde67796b5709d72d7c2c120f8158cfbca9ae71dc5b9659a3bb07bb0800cee6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781fffa94600000000000000de49191a81a4b7c49553f87cffffcc3282138e194c08dd6481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef84865b76a62103207c36832bc97571463d6901325cf13cd56f20506315ca9f32c53b42292baec47d378487af4b2ded13be229ae630cb0323d145887cca3304f0afceec37fd39fc1cca27b0aed0dc24"], 0xcd) [ 477.514320][T13093] CPU: 1 PID: 13093 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 477.524788][T13093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 477.534867][T13093] Call Trace: [ 477.538161][T13093] [ 477.541108][T13093] dump_stack_lvl+0xcd/0x134 [ 477.545733][T13093] should_fail.cold+0x5/0xa [ 477.550282][T13093] _copy_from_user+0x2a/0x170 [ 477.554991][T13093] copy_msghdr_from_user+0x89/0x150 [ 477.560212][T13093] ? __copy_msghdr+0x4a0/0x4a0 [ 477.564995][T13093] ? __lock_acquire+0x166e/0x56d0 [ 477.570057][T13093] ___sys_sendmsg+0xdd/0x1b0 [ 477.574680][T13093] ? do_recvmmsg+0x6e0/0x6e0 [ 477.579307][T13093] ? find_held_lock+0x2d/0x110 [ 477.584107][T13093] ? __might_fault+0xd1/0x170 [ 477.588814][T13093] ? lock_downgrade+0x6e0/0x6e0 [ 477.593702][T13093] __sys_sendmmsg+0x18b/0x460 [ 477.598413][T13093] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 477.603471][T13093] ? __ct_user_exit+0xff/0x150 [ 477.608259][T13093] ? lock_downgrade+0x6e0/0x6e0 [ 477.613130][T13093] ? lock_downgrade+0x6e0/0x6e0 [ 477.617993][T13093] ? syscall_enter_from_user_mode+0x22/0xb0 [ 477.623900][T13093] __x64_sys_sendmmsg+0x99/0x100 [ 477.628848][T13093] ? syscall_enter_from_user_mode+0x22/0xb0 [ 477.634762][T13093] do_syscall_64+0x35/0xb0 [ 477.639189][T13093] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 477.645092][T13093] RIP: 0033:0x7f8197a8a669 [ 477.649508][T13093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 477.669121][T13093] RSP: 002b:00007f8198c7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 477.677537][T13093] RAX: ffffffffffffffda RBX: 00007f8197babf80 RCX: 00007f8197a8a669 [ 477.685508][T13093] RDX: 03fffffffffffe36 RSI: 0000000020001e00 RDI: 0000000000000005 [ 477.693479][T13093] RBP: 00007f8198c7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 477.701509][T13093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:57:49 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xf5}, "f937dc7d85a73f6d50fd9a5b401deefd5056268d28ac4241eb877c4e2ba0c55db6b30faafb62f97cae3987db67ac8d788d84df969dbf22ff4f52002c82ef244f7ee84da38ff3de0b14e1df258baca22d19a095fb7b194cc7f00f58a73cff04310efae2f87c0fb0b0c6c82224d27ef14b9d6b85758a3934de619e57c32c59418640f9ead2d9be1f79488bab91c21f897fdc4cb270211ca1d88632bc4c4b8bcc65c2e740fb25bb38e661162dd39cdb803dd1694fac350c91b0587d2842f1930cde796ecc49d9a725a6312456c26d8304039e75cdb94d0ca192af99fd240b400f9f6527661d51866f2314ac3ad259bedd5d26f627de81"}, 0xf9) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (rerun: 64) 03:57:49 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a00, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x1c7, 0x7, 0x0, "be856b0a48aaa05c55a25b1792d9f1ba2e1d19245106e05ea128fff345d57c1e", 0x65700610}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306}, 0x6, {0x2, 0x4e23, @empty}, 'tunl0\x00'}) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8, 0xc9, 0x1}}}, 0x7) 03:57:49 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x10}}}, 0x4) [ 477.709498][T13093] R13: 00007f81980dfb1f R14: 00007f8198c7b300 R15: 0000000000022000 [ 477.717489][T13093] [ 477.724485][ T3647] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:49 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) [ 477.768243][ T3647] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:49 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x10}}}, 0x4) 03:57:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 94) 03:57:49 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dcdde67796b5709d72d7c2c120f8158cfbca9ae71dc5b9659a3bb07bb0800cee6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781fffa94600000000000000de49191a81a4b7c49553f87cffffcc3282138e194c08dd6481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef84865b76a62103207c36832bc97571463d6901325cf13cd56f20506315ca9f32c53b42292baec47d378487af4b2ded13be229ae630cb0323d145887cca3304f0afceec37fd39fc1cca27b0aed0dc24"], 0xcd) 03:57:49 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a00, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x1c7, 0x7, 0x0, "be856b0a48aaa05c55a25b1792d9f1ba2e1d19245106e05ea128fff345d57c1e", 0x65700610}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306}, 0x6, {0x2, 0x4e23, @empty}, 'tunl0\x00'}) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8, 0xc9, 0x1}}}, 0x7) pipe(&(0x7f0000000200)) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a00, 0x0) (async) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x1c7, 0x7, 0x0, "be856b0a48aaa05c55a25b1792d9f1ba2e1d19245106e05ea128fff345d57c1e", 0x65700610}) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306}, 0x6, {0x2, 0x4e23, @empty}, 'tunl0\x00'}) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8, 0xc9, 0x1}}}, 0x7) (async) [ 477.816292][ T3647] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:49 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0xc4e, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1d190000009b25b320352e0299cd33164160c18b3abd82d3f519bdef0000ba2ac7c9c2df423b28c2cdcca770dff363e0cd66f052bd54e92c3d621311a67c27d866479d"], 0x20) [ 477.938885][ T3647] Bluetooth: hci4: Malformed LE Event: 0x0d [ 477.964938][ T3647] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:49 executing program 1: r0 = semget(0x0, 0x7, 0x622) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000100)=0x1000) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000001c0)=""/225) (async) r1 = msgget$private(0x0, 0x93) msgrcv(r1, &(0x7f0000001580)={0x0, ""/4096}, 0x1004, 0x3, 0x1000) msgsnd(r1, &(0x7f00000025c0)={0x1, "882be1ceb94a262cbddba8bcb68947fa7de92a1c7c49d3e03e5d7860fa5ecaaa2b"}, 0x25, 0x800) msgrcv(r1, &(0x7f00000002c0)={0x0, ""/184}, 0xc0, 0x0, 0x1000) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000000)=""/156) (async) semop(r0, &(0x7f00000000c0)=[{0x519727cbfc1443d9, 0x7, 0x800}, {0x3, 0x5}], 0x2) 03:57:49 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x10}}}, 0x4) 03:57:49 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(0x0, 0xcd) 03:57:49 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0xc4e, 0x4) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1d190000009b25b320352e0299cd33164160c18b3abd82d3f519bdef0000ba2ac7c9c2df423b28c2cdcca770dff363e0cd66f052bd54e92c3d621311a67c27d866479d"], 0x20) (rerun: 64) 03:57:49 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a00, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x1c7, 0x7, 0x0, "be856b0a48aaa05c55a25b1792d9f1ba2e1d19245106e05ea128fff345d57c1e", 0x65700610}) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306}, 0x6, {0x2, 0x4e23, @empty}, 'tunl0\x00'}) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8, 0xc9, 0x1}}}, 0x7) 03:57:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 95) 03:57:49 executing program 5: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000040)=0x27) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x12, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x6, 0x3, 0x80}}, @l2cap_info_req={{0xa, 0x7, 0x2}}]}}, 0x18) 03:57:49 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0xc4e, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1d190000009b25b320352e0299cd33164160c18b3abd82d3f519bdef0000ba2ac7c9c2df423b28c2cdcca770dff363e0cd66f052bd54e92c3d621311a67c27d866479d"], 0x20) 03:57:49 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:57:49 executing program 5: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000040)=0x27) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x12, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x6, 0x3, 0x80}}, @l2cap_info_req={{0xa, 0x7, 0x2}}]}}, 0x18) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000040)=0x27) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x12, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x6, 0x3, 0x80}}, @l2cap_info_req={{0xa, 0x7, 0x2}}]}}, 0x18) (async) 03:57:49 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(0x0, 0xcd) 03:57:49 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 478.571430][ T3647] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 478.828382][ T3658] Bluetooth: hci3: Opcode 0x c03 failed: -110 03:57:50 executing program 1: r0 = semget(0x0, 0x7, 0x622) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000100)=0x1000) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000001c0)=""/225) (async, rerun: 32) r1 = msgget$private(0x0, 0x93) (rerun: 32) msgrcv(r1, &(0x7f0000001580)={0x0, ""/4096}, 0x1004, 0x3, 0x1000) (async, rerun: 32) msgsnd(r1, &(0x7f00000025c0)={0x1, "882be1ceb94a262cbddba8bcb68947fa7de92a1c7c49d3e03e5d7860fa5ecaaa2b"}, 0x25, 0x800) (async, rerun: 32) msgrcv(r1, &(0x7f00000002c0)={0x0, ""/184}, 0xc0, 0x0, 0x1000) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000000)=""/156) semop(r0, &(0x7f00000000c0)=[{0x519727cbfc1443d9, 0x7, 0x800}, {0x3, 0x5}], 0x2) 03:57:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 96) 03:57:50 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(0x0, 0xcd) 03:57:50 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x0, 0xc8, 0x20, 0x61, 0x81}}}, 0xb) 03:57:50 executing program 5: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000040)=0x27) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x12, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x6, 0x3, 0x80}}, @l2cap_info_req={{0xa, 0x7, 0x2}}]}}, 0x18) 03:57:50 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 03:57:50 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x51}, "140356a324cffebf47a8bd7d240163352481c5fc222ea62e1e04968909163a9cde9b02a212cb9019f49a1dfe7f6a32ee3bc7c6b65a1365248991d7534c53bc215be5a9bc259ce7b346f07761040864af89"}, 0x55) [ 479.420990][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:50 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0xcd) 03:57:50 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x23) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x8, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000480)={r0, r0}) recvmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000080)=@rc={0x1f, @none}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/87, 0x57}, {&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000200)=""/124, 0x7c}, {&(0x7f0000000280)=""/188, 0xbc}], 0x4, &(0x7f0000000380)=""/146, 0x92}, 0xe30ca01f0c7b9c1c) 03:57:50 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0xcd) 03:57:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 97) 03:57:50 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000500)={{0x9, 0x6}, 0x100, './file0\x00'}) openat$capi20(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r5, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@sco}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000005000000ffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="08005700fcffffff08009f0005000000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x108, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8318}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffa6c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdd8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "affe861cbc64745fbfceb1a7bccf096b08c83793489382"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000125bd7000fddbdf2555000000080001004c00000008000300", @ANYRES32=r8, @ANYBLOB="0c001429732d68ee3327cd77"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004849}, 0x4) dup(r1) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x841}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293d27de67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x1f}, {0x5, 0x14, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000854) 03:57:50 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x0, 0xc8, 0x20, 0x61, 0x81}}}, 0xb) 03:57:51 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x23) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x8, 0x4) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000480)={r0, r0}) (async) recvmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000080)=@rc={0x1f, @none}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/87, 0x57}, {&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000200)=""/124, 0x7c}, {&(0x7f0000000280)=""/188, 0xbc}], 0x4, &(0x7f0000000380)=""/146, 0x92}, 0xe30ca01f0c7b9c1c) 03:57:51 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x51}, "140356a324cffebf47a8bd7d240163352481c5fc222ea62e1e04968909163a9cde9b02a212cb9019f49a1dfe7f6a32ee3bc7c6b65a1365248991d7534c53bc215be5a9bc259ce7b346f07761040864af89"}, 0x55) 03:57:51 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0xcd) 03:57:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 98) [ 479.623272][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 479.634358][T13211] device bridge_slave_1 left promiscuous mode 03:57:51 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x0, 0xc8, 0x20, 0x61, 0x81}}}, 0xb) 03:57:51 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x23) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x8, 0x4) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000480)={r0, r0}) (async) recvmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000080)=@rc={0x1f, @none}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/87, 0x57}, {&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000200)=""/124, 0x7c}, {&(0x7f0000000280)=""/188, 0xbc}], 0x4, &(0x7f0000000380)=""/146, 0x92}, 0xe30ca01f0c7b9c1c) [ 479.677826][T13211] bridge0: port 2(bridge_slave_1) entered disabled state 03:57:51 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xcd) 03:57:51 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x51}, "140356a324cffebf47a8bd7d240163352481c5fc222ea62e1e04968909163a9cde9b02a212cb9019f49a1dfe7f6a32ee3bc7c6b65a1365248991d7534c53bc215be5a9bc259ce7b346f07761040864af89"}, 0x55) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x51}, "140356a324cffebf47a8bd7d240163352481c5fc222ea62e1e04968909163a9cde9b02a212cb9019f49a1dfe7f6a32ee3bc7c6b65a1365248991d7534c53bc215be5a9bc259ce7b346f07761040864af89"}, 0x55) (async) 03:57:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 99) 03:57:51 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xcd) [ 479.812960][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:51 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000500)={{0x9, 0x6}, 0x100, './file0\x00'}) (async) openat$capi20(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r5, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@sco}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000005000000ffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="08005700fcffffff08009f0005000000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x108, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8318}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffa6c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdd8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "affe861cbc64745fbfceb1a7bccf096b08c83793489382"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000125bd7000fddbdf2555000000080001004c00000008000300", @ANYRES32=r8, @ANYBLOB="0c001429732d68ee3327cd77"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004849}, 0x4) (async) dup(r1) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293d27de67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x1f}, {0x5, 0x14, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000854) 03:57:51 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0x5, 0x5, 0x0, 0x20, 0xffe0}}}}, 0x17) 03:57:51 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xcd) 03:57:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="01000d040e580e200f703ee604dd0aeeee941b"], 0x10) 03:57:51 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x25}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @any, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb, "757b38e88c9eded23f75f9"}]}}}}, 0x28) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @any, 0x1, 0x81, 0x0, 0x277, 0x3, 0x3f}}}, 0x14) 03:57:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) (fail_nth: 100) 03:57:51 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x25}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @any, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb, "757b38e88c9eded23f75f9"}]}}}}, 0x28) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @any, 0x1, 0x81, 0x0, 0x277, 0x3, 0x3f}}}, 0x14) 03:57:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="01000d040e580e200f703ee604dd0aeeee941b"], 0x10) 03:57:51 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dcdde67796b5709d72d7c2c120f8158cfbca9ae71dc5b9659a3bb07bb0800cee6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781fffa94600000000000000de49191a81a4b7c49553f87cffffcc3282138e194c08dd"], 0xcd) [ 480.431276][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="01000d040e580e200f703ee604dd0aeeee941b"], 0x10) 03:57:51 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0x5, 0x5, 0x0, 0x20, 0xffe0}}}}, 0x17) 03:57:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) [ 480.541996][ T3658] bt_err_ratelimited: 9 callbacks suppressed [ 480.542014][ T3658] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 480.548098][ T3658] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:52 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000500)={{0x9, 0x6}, 0x100, './file0\x00'}) openat$capi20(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r5, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@sco}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000005000000ffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="08005700fcffffff08009f0005000000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x108, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8318}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffa6c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdd8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "affe861cbc64745fbfceb1a7bccf096b08c83793489382"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000125bd7000fddbdf2555000000080001004c00000008000300", @ANYRES32=r8, @ANYBLOB="0c001429732d68ee3327cd77"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004849}, 0x4) dup(r1) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x841}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293d27de67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x1f}, {0x5, 0x14, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000854) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000500)={{0x9, 0x6}, 0x100, './file0\x00'}) (async) openat$capi20(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ifreq(r5, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@sco}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000005000000ffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="08005700fcffffff08009f0005000000"], 0x2c}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x108, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8318}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffa6c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdd8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "affe861cbc64745fbfceb1a7bccf096b08c83793489382"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000125bd7000fddbdf2555000000080001004c00000008000300", @ANYRES32=r8, @ANYBLOB="0c001429732d68ee3327cd77"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004849}, 0x4) (async) dup(r1) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293d27de67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x1f}, {0x5, 0x14, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000854) (async) 03:57:52 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x4, 0x8}, {0x7, 0x7, 0x100, 0x8}}}}, 0x15) 03:57:52 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x25}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @any, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb, "757b38e88c9eded23f75f9"}]}}}}, 0x28) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @any, 0x1, 0x81, 0x0, 0x277, 0x3, 0x3f}}}, 0x14) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x25}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @any, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb, "757b38e88c9eded23f75f9"}]}}}}, 0x28) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @any, 0x1, 0x81, 0x0, 0x277, 0x3, 0x3f}}}, 0x14) (async) 03:57:52 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xcd) 03:57:52 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0x5, 0x5, 0x0, 0x20, 0xffe0}}}}, 0x17) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0x5, 0x5, 0x0, 0x20, 0xffe0}}}}, 0x17) (async) 03:57:52 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x4, 0x8}, {0x7, 0x7, 0x100, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x4, 0x8}, {0x7, 0x7, 0x100, 0x8}}}}, 0x15) (async) [ 480.616966][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 480.620723][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 480.719289][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 480.727631][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 480.742523][ T3662] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 480.758863][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:52 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:57:52 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xcd) [ 480.766680][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:52 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 03:57:52 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04f5a594ce7653c5dd2cf0e76ff93e20354202"], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:57:52 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x4, 0x8}, {0x7, 0x7, 0x100, 0x8}}}}, 0x15) [ 480.925341][ T3662] Bluetooth: hci4: Received unexpected HCI Event 0x00 03:57:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x4) 03:57:52 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0xcd) 03:57:52 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:57:52 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x5, 0xc8, "ec901265989bc97a"}}}, 0xe) 03:57:52 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04f5a594ce7653c5dd2cf0e76ff93e20354202"], 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:57:52 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04000000"], 0xffffff2d) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x5}}}}, 0xf) [ 481.006038][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:52 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dcdde67796b5709d72d7c2c120f8158cfbca9ae71dc5b9659a3bb07bb"], 0xcd) [ 481.089244][ T3662] Bluetooth: hci4: Received unexpected HCI Event 0x00 03:57:52 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04f5a594ce7653c5dd2cf0e76ff93e20354202"], 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:57:52 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043e"], 0xcd) [ 481.129748][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 481.129775][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:52 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04000000"], 0xffffff2d) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x5}}}}, 0xf) open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x20) (async) pipe(&(0x7f0000000200)) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04000000"], 0xffffff2d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x5}}}}, 0xf) (async) 03:57:52 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="ffefffffffe7"], 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043607ffaaaaaaaaaa124eae9b4b49f6b9962655add44cd809e8cfd0f8c4bfbfb34957b08577006ca6b4626f0e06a52e2f767a97200797078378"], 0xa) 03:57:52 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x5, 0xc8, "ec901265989bc97a"}}}, 0xe) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x5, 0xc8, "ec901265989bc97a"}}}, 0xe) (async) 03:57:52 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1d1900000000000020352e0299cddc7f6200000000100000000089ef0bf996302f742f19552d2b6500000000b1dc92924f50f578eab2cb7be02ef907b6af7308f8d739c50c8e54b5afb4cdf42a3efc6363fdfe99e56349b132576a36e964c4a1b76477226deb8b7eccdebea65b3e11cf9c37c566b5b0332ae7d70bf1c4c3997f52c5afe6cdd6f4af6a6be5329a2089338edc3511a05d5c565d2dc1ebb57bc53b005d826e5e38c7ea"], 0x20) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x69}, "3c81f0b344818d6f5576b3fe15974f8f6196b9b00e591b5b7e4c1985973843687377d01e3c904d975f7991ebe3f4a44091d2e086ea78f4f7be2e3fabe47747ad41f574e589c8486618ed1011f4d9921fb275cb0c331e7dbd675afa9bad61e468db30445ad0a42e4899"}, 0x6d) 03:57:52 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="ffefffffffe7"], 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043607ffaaaaaaaaaa124eae9b4b49f6b9962655add44cd809e8cfd0f8c4bfbfb34957b08577006ca6b4626f0e06a52e2f767a97200797078378"], 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="ffefffffffe7"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043607ffaaaaaaaaaa124eae9b4b49f6b9962655add44cd809e8cfd0f8c4bfbfb34957b08577006ca6b4626f0e06a52e2f767a97200797078378"], 0xa) (async) 03:57:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x7) 03:57:52 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043e"], 0xcd) 03:57:52 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x20) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04000000"], 0xffffff2d) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x5}}}}, 0xf) 03:57:52 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="ffefffffffe7"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043607ffaaaaaaaaaa124eae9b4b49f6b9962655add44cd809e8cfd0f8c4bfbfb34957b08577006ca6b4626f0e06a52e2f767a97200797078378"], 0xa) 03:57:52 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x5, 0xc8, "ec901265989bc97a"}}}, 0xe) [ 481.376234][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:52 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043e"], 0xcd) 03:57:52 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1d1900000000000020352e0299cddc7f6200000000100000000089ef0bf996302f742f19552d2b6500000000b1dc92924f50f578eab2cb7be02ef907b6af7308f8d739c50c8e54b5afb4cdf42a3efc6363fdfe99e56349b132576a36e964c4a1b76477226deb8b7eccdebea65b3e11cf9c37c566b5b0332ae7d70bf1c4c3997f52c5afe6cdd6f4af6a6be5329a2089338edc3511a05d5c565d2dc1ebb57bc53b005d826e5e38c7ea"], 0x20) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x69}, "3c81f0b344818d6f5576b3fe15974f8f6196b9b00e591b5b7e4c1985973843687377d01e3c904d975f7991ebe3f4a44091d2e086ea78f4f7be2e3fabe47747ad41f574e589c8486618ed1011f4d9921fb275cb0c331e7dbd675afa9bad61e468db30445ad0a42e4899"}, 0x6d) 03:57:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x10) 03:57:52 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04ca1a0d140200ffffffff0801bf5b1efcfac51c453bcddff100001def61831f7757ba0f79ffe454000000f40a68c3ffefd280592cd4d9c5e53560c9d7b56907c9640639f5d597906736660605c230d91fd49b1d31af9e17c3e77a8521000000000000"], 0x1d) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 03:57:52 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x3, 0xa}, {0xfff9, 0x5, 0x3ff, 0x4, 0x401}}}}, 0x17) 03:57:52 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x67}, @l2cap_cid_signaling={{0x63}, [@l2cap_conf_rsp={{0x5, 0x2c, 0x28}, {0x200, 0x5, 0xfa43, [@l2cap_conf_mtu={0x1, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x1, 0x500, 0x4, 0x0, 0x3}}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0x100}]}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x7, 0x7064}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0xcd3}}, @l2cap_conf_req={{0x4, 0x58, 0x13}, {0x4, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x80}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x1, 0x80, 0x9, 0x4}}]}}, @l2cap_conf_rsp={{0x5, 0x1, 0xe}, {0x1, 0x3, 0x9, [@l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3ff}]}}]}}, 0x6c) 03:57:52 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1d1900000000000020352e0299cddc7f6200000000100000000089ef0bf996302f742f19552d2b6500000000b1dc92924f50f578eab2cb7be02ef907b6af7308f8d739c50c8e54b5afb4cdf42a3efc6363fdfe99e56349b132576a36e964c4a1b76477226deb8b7eccdebea65b3e11cf9c37c566b5b0332ae7d70bf1c4c3997f52c5afe6cdd6f4af6a6be5329a2089338edc3511a05d5c565d2dc1ebb57bc53b005d826e5e38c7ea"], 0x20) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x69}, "3c81f0b344818d6f5576b3fe15974f8f6196b9b00e591b5b7e4c1985973843687377d01e3c904d975f7991ebe3f4a44091d2e086ea78f4f7be2e3fabe47747ad41f574e589c8486618ed1011f4d9921fb275cb0c331e7dbd675afa9bad61e468db30445ad0a42e4899"}, 0x6d) 03:57:52 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54"], 0xcd) 03:57:52 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04ca1a0d140200ffffffff0801bf5b1efcfac51c453bcddff100001def61831f7757ba0f79ffe454000000f40a68c3ffefd280592cd4d9c5e53560c9d7b56907c9640639f5d597906736660605c230d91fd49b1d31af9e17c3e77a8521000000000000"], 0x1d) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04ca1a0d140200ffffffff0801bf5b1efcfac51c453bcddff100001def61831f7757ba0f79ffe454000000f40a68c3ffefd280592cd4d9c5e53560c9d7b56907c9640639f5d597906736660605c230d91fd49b1d31af9e17c3e77a8521000000000000"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) (async) [ 481.522106][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 481.655369][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 481.667901][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x3, 0xa}, {0xfff9, 0x5, 0x3ff, 0x4, 0x401}}}}, 0x17) 03:57:53 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x67}, @l2cap_cid_signaling={{0x63}, [@l2cap_conf_rsp={{0x5, 0x2c, 0x28}, {0x200, 0x5, 0xfa43, [@l2cap_conf_mtu={0x1, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x1, 0x500, 0x4, 0x0, 0x3}}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0x100}]}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x7, 0x7064}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0xcd3}}, @l2cap_conf_req={{0x4, 0x58, 0x13}, {0x4, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x80}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x1, 0x80, 0x9, 0x4}}]}}, @l2cap_conf_rsp={{0x5, 0x1, 0xe}, {0x1, 0x3, 0x9, [@l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3ff}]}}]}}, 0x6c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x67}, @l2cap_cid_signaling={{0x63}, [@l2cap_conf_rsp={{0x5, 0x2c, 0x28}, {0x200, 0x5, 0xfa43, [@l2cap_conf_mtu={0x1, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x1, 0x500, 0x4, 0x0, 0x3}}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0x100}]}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x7, 0x7064}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0xcd3}}, @l2cap_conf_req={{0x4, 0x58, 0x13}, {0x4, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x80}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x1, 0x80, 0x9, 0x4}}]}}, @l2cap_conf_rsp={{0x5, 0x1, 0xe}, {0x1, 0x3, 0x9, [@l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3ff}]}}]}}, 0x6c) (async) [ 481.715707][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 481.715726][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:53 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04ca1a0d140200ffffffff0801bf5b1efcfac51c453bcddff100001def61831f7757ba0f79ffe454000000f40a68c3ffefd280592cd4d9c5e53560c9d7b56907c9640639f5d597906736660605c230d91fd49b1d31af9e17c3e77a8521000000000000"], 0x1d) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 03:57:53 executing program 4: syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x1, 0x12}, {0x9000, 0x7ff, 0xffff, 0x0, [0x4, 0x0, 0xb6b9, 0x5, 0x6]}}}}, 0x1f) 03:57:53 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca"], 0xcd) 03:57:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x11) 03:57:53 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x67}, @l2cap_cid_signaling={{0x63}, [@l2cap_conf_rsp={{0x5, 0x2c, 0x28}, {0x200, 0x5, 0xfa43, [@l2cap_conf_mtu={0x1, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x1, 0x500, 0x4, 0x0, 0x3}}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0x100}]}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x7, 0x7064}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0xcd3}}, @l2cap_conf_req={{0x4, 0x58, 0x13}, {0x4, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x80}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x1, 0x80, 0x9, 0x4}}]}}, @l2cap_conf_rsp={{0x5, 0x1, 0xe}, {0x1, 0x3, 0x9, [@l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3ff}]}}]}}, 0x6c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x67}, @l2cap_cid_signaling={{0x63}, [@l2cap_conf_rsp={{0x5, 0x2c, 0x28}, {0x200, 0x5, 0xfa43, [@l2cap_conf_mtu={0x1, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x1, 0x500, 0x4, 0x0, 0x3}}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0x100}]}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x7, 0x7064}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0xcd3}}, @l2cap_conf_req={{0x4, 0x58, 0x13}, {0x4, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x80}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x1, 0x80, 0x9, 0x4}}]}}, @l2cap_conf_rsp={{0x5, 0x1, 0xe}, {0x1, 0x3, 0x9, [@l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3ff}]}}]}}, 0x6c) (async) 03:57:53 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000aa83693f8d59e1f428d32049c94b000000000000aaaaaaaa090000"], 0x1d) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"/313], 0x9) [ 481.835064][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 481.844215][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x3, 0xa}, {0xfff9, 0x5, 0x3ff, 0x4, 0x401}}}}, 0x17) 03:57:53 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000aa83693f8d59e1f428d32049c94b000000000000aaaaaaaa090000"], 0x1d) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"/313], 0x9) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000aa83693f8d59e1f428d32049c94b000000000000aaaaaaaa090000"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"/313], 0x9) (async) 03:57:53 executing program 4: syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "463949d381b639b795dde17fce4f967139fdf8942fe8a5858c356c3bec97672b47a5b64596a09ee89766d39d68df3645a91413f84dc85daf19adc5bdb5d9c08c49fecd15b209aba178a4f094679f990bff8f863ea4f3d6306de5862430ec62e6fb267f1ea671a59a4bc87919d658f33cb1bf5e4321d8e7b8b0d52e00095f7b2e58eec9de3904c643bb720e1c3da11e8801c44effcef6e5388597181705b6737d74987562e428fb1191309a465c41712dd9ab107215d6d0bc228294c7a4b2500c984c2d940e450c5bf18e7d613fe64c37d08b86ab622d17f98a51754170dd012f5fe4676bdf7f218919cf1089e1509f2f7cd7382eb95d3442409e8b87fe35cbeda0de210db2aec1893f14ec60a1d96b286d6e96d809a4467d742efb0a0e77133835bf7442888e4ed4cd67e4925aca0bc4851ef93d4d7d527a7b2ab52393e1cae81124f442f2547e0d2321a69df77be64ee1ffae81e3a634e99edc08ee930184fd54b1c2dda9dbdd3af50f9cea9b52594d727af35edd4dcde4ab1a64b1df3c0ea470dca6364f139dab523027f4aff02c5222085934c46b9ee6cdef00eb524e427be557227cc1b9ab60fdc19876997315ab445e452df78744bc4f61ba895155d8a25d4eda29c74301361defb4d71ca424f58f63d288856638750262f2b300cc2f0a1c3ac8089c15719887f9a6ecf56ff2997fef46fe24908d7ba5754e5da366e8d873e44aafffd799c490d7fe0419e919bf92e06ff3ee38983a7d37d21ba04dbee2701ab08c4cee2d0fc6db47e81b206bedcb5472ea0d94c26d518acf3f8cf6776da9eefa2a81a84ef6a9c3c3761ef0ee5109970e96e8ae92fca8c6be7400f2462c882ad22f381c5ec9c7805cd63d2a72bdfa4c46f1c64e606a70624a8982037ea0f328bf8afe7b36644a7fb7cd911582b7b884d4f4feadc3b65818edddcd6f7d7651f01e0c3d700d178bbd84688aec5a410b6b95c66f97ea194584e5c862fb5a10d2c47deb9e9d218f84c87b90e245928a61bb92fc02affcb10b4bf0be3798d27de459420b8c4baaf4e7117f2f551e5530cf6b3996fe814ef7309f10aca268ec6631f5512a271fa11fac3fbbab9f1594c28383566086cf94bc47259ea2b769f6b10cbf757d38fa948ac8fb991201ec858e6ef6c612ba63e8b8613c1cb8c61d50cad133c0526a2e1ddc3d6213b08f2c26f344e11cb388b5ea8f95344bc2aceadd8f2f2aa5c044aa38d2109527604e6b1bb39b1f03dcd47e9ad3f8c28a6b4d5162a77d6f8fce8014222dd155f4a5538ec703bfed650d0850f6b18e00a24baf5bfe93dcadc6c6497dbae6d8ffb5e558b4be5e75ff7101b37159abf393ab17690ee9aef3ce493fa24dd2df28e26e811abb48cc8ac6225a396b81ccaae9795acdf0e9026608f2e20fa05a4ee133409fae64eaf5853e8d07772b3177e4e8fcd27e989a3a87f1e8fa50aae14cb8c815a91fb71431c5762248b26bdcf08166c90d0178b7f1105dad1ea48706b1acfcfcbb47dc5f8615de48fae4716f96ecbaaf99de30f7a2c936ff62282bfc6fb107281127b8b6cfba1831e4e2f8aac2528cc0b716770499d88f911b8b217a7b66943964abc6aa70709f1e93f9dde4b60ae2b0c7ad0c4e8bce4cab4fca028e60af3faba68bb93e2efcef5a9c62428274b7a094809bcbfb70f2b917e6b557479f745276c13b9dad072beb43af75db7962ad9774b5d89ee14788482faa1d123b212b506ae941dccbe4fb39bf108d02b74342736cf184995c3cf54a5021d56fd0cb4b61b60a704fa8a1873bfcf18fd256b366cf100d0f2bda3ce5a34bcb778442bd35685186bed8d9a5a61db857923ac327d09d9177a57ac8e6f54262c1e5d3fa60b9fcf7ab52930219ada359afcda03811fd9cba3453195943df58e9d5458f6657a76cea05b83460c70d02ccfde376232d0fc1b3cb7a141ee7c50c435804841856020d375fccab39881c2ef017eb1fdec1a00537f0cda277b630e51d568d8d67acb1a3f4b2b4339bbc82955f66b3b2baef9ccbf871c4db840f61bc41c5cb7f1ec0d7cb5123adc2be40520e6c9f9ca0e6ddd4bf1423ac192ddd32d0ab8859adae89f8d5f7c220f3517d668c240329b8e633e3b6bbb83aa48448548a074024b02f89983618bf7f4b9c1b295a575971cc205fcbeeac66666ee3844e4d01456e49b92fb21cb468c2cd89503b57a4fe3cd12f3650e080ba95a887cd73f05c5aa5651aec0a3e1fac33ee4752ac179c9c2c669fa44a3357c49c3b9668219f85694f27ef1a453d3b68983e0edf826d5f600077074a40a43e689d526ee8b8f5fd1ca8c5c2dbf6246bd3828e45e45ee754f5c3e07599bccb1b38d8839d4ae6c94c949ef1d18abd9dc17ecc2c298d9478df01c7fd245467613cd3e2acd564f281f78791af226bf7c5dd1f2a7aab3e2892a123bd7542704c9883679bb25b96cfe329f8c1161b4d720d23c0e956899d7c5063a5653d63b86ca89da5cf6e7e20ca12dbef05b71895738f5d467178d28138af266983a725e72a2db7b48a7abc8ed540410db0b96c95b242b0e80313760e6f92fd7721e8ac67c626d18d07a31412986a01c21077f25b86bbcac297618c82063300ea5c5ca95c5f762fa345902a3c9dfd38720bfd32eb06003dc71444dd1da31d90153ca6db56e9554b4a93727bf482cd38d7e542343cb2912afd4177f81506704d90576bed9379879c104e4b743a26c1a83ac8be412e95b3776dccda9d4aee40791a34d703ce2678d11598257009e57e4d25912d55ccc05166f5084373e267bf7fdbfeb5dd312dab9057334862704a6beba6a7d5cb447e83f84f13d53a78c5c0fa15179fd8bb53a9fef163610dba8299a6f132cdea155b615a51d86b2b01b529788ea2bfa6b5616b012122f588343d7974f2e9a267fdb37b51647649ba0f9d42e0ddae96974054c7665c0131f0a8df1b1a5625cf72a43cbde9f28059217b9ebd6e2b7af7aad611417404661ba9e00d0d74259a8ce541927736afefe2ac5396f556aa3e2c5cfedab367a436f7c92b6ba563ff5ef6d58e729ebe0e181dc3b64b27cc75a91478851d324cc0a5c8446c0562cbf2f67157f7d29933d0fe959d2152c35dd5a168628b61ed7814a86243beea73aac94124f2480c62e06953a704f37645df4d9d98779570ffba0348762c2bd865dc27a1c190d356987f13e5782dc0589f60af871c6f880f99bbd0d3b01f214112549906e82a96591428ca1d8ceea232629b6eef5621527698343dfeaecf1d82adb10a3ec42b9e7a3f8a2b9bcd34b0c6df9c32672b13b39536e3ec16d1e08af2c63aa2f4c9e4094e78874fb38ace6cf943c180948888de4dd963b861ff79eb8d7aac73e2938c1d666e87e67c399ce2903477f7ccc074106f4a2cc129ac708194d8020664aac10e418a9b6ab7ac0639bd681d84e70b5d9bb5432bc5b12d2f5c214deadcec9b70fe41e7f5e321324b4aa0064d274f9fcdb76e013c786029d13a1f8a3568d2d453698c9fb58c588580e7dc7b88e66f1d7adb9e58ad74dcce9b87c0af1cc490d2d42a279bfdfb7a418c329c26f533938e540a5af3a9cd5e5ab3538201da286dc94b043b870788aa70fb0d61bb2c897109b7500e2a29c0f08e95d42180882d9c4423e2a4dc8e3d81719037dd0288b0bf1bf558490a96be74fe3e7e1bb2864408326f92378d85f6c25149a54aeddc5141cc8537b34c69ebb1c0445106a034f34d7f9ee43fa82b3c238c002f1405084e338948ed896790a9db046dda5b0426609a34bd278bc0aea20be4bb0ec374b5b09dfbeb15d5a7e79c9ca755e555d8bf425459b099599e35ac1ed3a8ce198f7865d49772813fb5eb5cfecb125858152be8b435e1602ea4b02c5a0c7c6830753574942fd22d1df343eb8422b1ec8c3f7ae7dc45abec7a5d66c5929f85e7af8c24c6d90857f25d735ba2c4beae91956719eca4eb8626a38ec3a763fb7c0517dfd67b90d054acf2b49bb0eaed2fe5810b846ead6352c3b3ef947d68f5810c1900cd25c514da93e15edfd6b4ad9d699cb92a2a7150ee4bf0c81e7c37a1bf971e7b610d6177ba7f2cf35e59a7e2728bb89f87e2396c62de4bdb1686779f6377b4a20e244a6fd1157d74e629eaf3aa83dcc61047135e27c32d13932b7710b534b9f8368d8bade8525d6eadc574eb6eadd5fd16aa7a8105398d5df79b276a144e28165953cbdc38fe72bd5797ab98be3648c6035bf860b5d8f0c79b68959bada28ccf0df8a8284550aa5b66dad8cb8e1040327c991f553d14b8b85efa988b5c6f55aac462f339e1602fa62318f3c1fba63599691161490799d952577cd40f094e98e28f688b72a2f528e00724d034369b904d48a950e439e14ba740f4356bd50b600af2f48b273ff11b6064704c047d41bb36c55ef7993f022edf5a5a1840df3a9092ecbdb9c65b493e99967cd7eaf54198f8a4ced7ac7cf606337b09c9a2f0d447e528f8ecf0bd7109759c07150d7384f73ccfab696d5176f20bb1679b7b2a87856576cf6308b771cec3d20729b68ed0e6403c3fc0fb3f1fe0e3656f17be91b99bb14f587600b9b886f649a85c6cbc1bee5d0aa6d369c178a79df97b23acc7d33b511536e5414e3e3f8071776d037508a7b230a72c654fd01059fd71be93d95184f6e31a950a6b13bba055faa2ed70b14714ec18bca4d23bfe655242eb9b8f1536aeff3da9d3cb474ec5ae5547e7676163c3ca439d6cd2d19ad90c62304d9d6611c5c1ddd8231256d58f92c516e757614bdbf2ce393614ba4e8125f610d1eb2ccedffc9e674f8c9c768a811e18c6d274a2a97e91a83fecffd80241f97854ef0c206f73349f2c596eaba1e366f7f88771e0cb53d65c3fb470609df204fc96198d84c56294c0440133d4d1e2651438e4c740af8fe7205153a739ec4009a9e84dac4c474e9eb67b7a6b123e3d0c5189494958229389c4d9df05939d7dc048bfe470befd815416a47f3eed8dc7e36fce2fa39a4c9828950c047b52d2ace88722382f00de40bb5514b8ad3fbe1f725d2d41ae4f9ba15e9c9a44f971b33b7d65b73c99c8a068b7f5f5a245f856fdfedaaad1d7db3909f79e5fabbb0eea2d44f1f48af43171bb736be2bc7d2c00b3e42dbe5dde998e5fe0321637ca0f338a2a507256ad0c0f3ee6081a974360729918b70b7821c638f15ee86ee965eecd06562d21156a57311109044a3415dfdf26122eaff080596919c319d80da415eb9519d1cc04e87cd2c0dffd9b30cfd0c40e3e0879d8d4c34a245a2eff4630122f2bfaa6f47375592d6d48ad7b9b9241d06818f39e2ae6a4f016254a3271809f8e4806af415e912e801b807a814ae87a30a492cebc43dcad8da9eac2671a71499ff4625e9955b509101bfb304c7ed23f24dad69f16f31f6f3d1d00b794349991a52d3630eee6dc609ff3175f5553caefba5b97ea22d22bf7d2473b21b66d49e3f1d121aaa27e0d28f170ef38ec9deb3c7f619a4866fd31a76118e8d8bbb3cdd72a7272780710e2d57da8f5eb9e2af36a652e2c18c1249ec1f828fa8adb5596a9b3b484b44721afcfc5759a32b3b5372a9d234d3d9583782d2175af76d71bceeeec41575fcb1501451a46f2e72b2fe234a8b1ac00292e4fc36ea0fa1611557f51f5ba1e10f4a6a6b4c0e98baabb9bbcba944e44c07869151ed7bf15889a7a739483c9e06ce3aa4b561825b551a3a11c2282f43fff36b33e5d825677bf2ef1aa866c34a129e749c8a11022692fc49bef432b04099b4360966598f83c4d84f4b7be802e83bfecc33f67bddbd47b310047d8ceb27fc07a383f"}, 0x1004) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x1, 0x12}, {0x9000, 0x7ff, 0xffff, 0x0, [0x4, 0x0, 0xb6b9, 0x5, 0x6]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "463949d381b639b795dde17fce4f967139fdf8942fe8a5858c356c3bec97672b47a5b64596a09ee89766d39d68df3645a91413f84dc85daf19adc5bdb5d9c08c49fecd15b209aba178a4f094679f990bff8f863ea4f3d6306de5862430ec62e6fb267f1ea671a59a4bc87919d658f33cb1bf5e4321d8e7b8b0d52e00095f7b2e58eec9de3904c643bb720e1c3da11e8801c44effcef6e5388597181705b6737d74987562e428fb1191309a465c41712dd9ab107215d6d0bc228294c7a4b2500c984c2d940e450c5bf18e7d613fe64c37d08b86ab622d17f98a51754170dd012f5fe4676bdf7f218919cf1089e1509f2f7cd7382eb95d3442409e8b87fe35cbeda0de210db2aec1893f14ec60a1d96b286d6e96d809a4467d742efb0a0e77133835bf7442888e4ed4cd67e4925aca0bc4851ef93d4d7d527a7b2ab52393e1cae81124f442f2547e0d2321a69df77be64ee1ffae81e3a634e99edc08ee930184fd54b1c2dda9dbdd3af50f9cea9b52594d727af35edd4dcde4ab1a64b1df3c0ea470dca6364f139dab523027f4aff02c5222085934c46b9ee6cdef00eb524e427be557227cc1b9ab60fdc19876997315ab445e452df78744bc4f61ba895155d8a25d4eda29c74301361defb4d71ca424f58f63d288856638750262f2b300cc2f0a1c3ac8089c15719887f9a6ecf56ff2997fef46fe24908d7ba5754e5da366e8d873e44aafffd799c490d7fe0419e919bf92e06ff3ee38983a7d37d21ba04dbee2701ab08c4cee2d0fc6db47e81b206bedcb5472ea0d94c26d518acf3f8cf6776da9eefa2a81a84ef6a9c3c3761ef0ee5109970e96e8ae92fca8c6be7400f2462c882ad22f381c5ec9c7805cd63d2a72bdfa4c46f1c64e606a70624a8982037ea0f328bf8afe7b36644a7fb7cd911582b7b884d4f4feadc3b65818edddcd6f7d7651f01e0c3d700d178bbd84688aec5a410b6b95c66f97ea194584e5c862fb5a10d2c47deb9e9d218f84c87b90e245928a61bb92fc02affcb10b4bf0be3798d27de459420b8c4baaf4e7117f2f551e5530cf6b3996fe814ef7309f10aca268ec6631f5512a271fa11fac3fbbab9f1594c28383566086cf94bc47259ea2b769f6b10cbf757d38fa948ac8fb991201ec858e6ef6c612ba63e8b8613c1cb8c61d50cad133c0526a2e1ddc3d6213b08f2c26f344e11cb388b5ea8f95344bc2aceadd8f2f2aa5c044aa38d2109527604e6b1bb39b1f03dcd47e9ad3f8c28a6b4d5162a77d6f8fce8014222dd155f4a5538ec703bfed650d0850f6b18e00a24baf5bfe93dcadc6c6497dbae6d8ffb5e558b4be5e75ff7101b37159abf393ab17690ee9aef3ce493fa24dd2df28e26e811abb48cc8ac6225a396b81ccaae9795acdf0e9026608f2e20fa05a4ee133409fae64eaf5853e8d07772b3177e4e8fcd27e989a3a87f1e8fa50aae14cb8c815a91fb71431c5762248b26bdcf08166c90d0178b7f1105dad1ea48706b1acfcfcbb47dc5f8615de48fae4716f96ecbaaf99de30f7a2c936ff62282bfc6fb107281127b8b6cfba1831e4e2f8aac2528cc0b716770499d88f911b8b217a7b66943964abc6aa70709f1e93f9dde4b60ae2b0c7ad0c4e8bce4cab4fca028e60af3faba68bb93e2efcef5a9c62428274b7a094809bcbfb70f2b917e6b557479f745276c13b9dad072beb43af75db7962ad9774b5d89ee14788482faa1d123b212b506ae941dccbe4fb39bf108d02b74342736cf184995c3cf54a5021d56fd0cb4b61b60a704fa8a1873bfcf18fd256b366cf100d0f2bda3ce5a34bcb778442bd35685186bed8d9a5a61db857923ac327d09d9177a57ac8e6f54262c1e5d3fa60b9fcf7ab52930219ada359afcda03811fd9cba3453195943df58e9d5458f6657a76cea05b83460c70d02ccfde376232d0fc1b3cb7a141ee7c50c435804841856020d375fccab39881c2ef017eb1fdec1a00537f0cda277b630e51d568d8d67acb1a3f4b2b4339bbc82955f66b3b2baef9ccbf871c4db840f61bc41c5cb7f1ec0d7cb5123adc2be40520e6c9f9ca0e6ddd4bf1423ac192ddd32d0ab8859adae89f8d5f7c220f3517d668c240329b8e633e3b6bbb83aa48448548a074024b02f89983618bf7f4b9c1b295a575971cc205fcbeeac66666ee3844e4d01456e49b92fb21cb468c2cd89503b57a4fe3cd12f3650e080ba95a887cd73f05c5aa5651aec0a3e1fac33ee4752ac179c9c2c669fa44a3357c49c3b9668219f85694f27ef1a453d3b68983e0edf826d5f600077074a40a43e689d526ee8b8f5fd1ca8c5c2dbf6246bd3828e45e45ee754f5c3e07599bccb1b38d8839d4ae6c94c949ef1d18abd9dc17ecc2c298d9478df01c7fd245467613cd3e2acd564f281f78791af226bf7c5dd1f2a7aab3e2892a123bd7542704c9883679bb25b96cfe329f8c1161b4d720d23c0e956899d7c5063a5653d63b86ca89da5cf6e7e20ca12dbef05b71895738f5d467178d28138af266983a725e72a2db7b48a7abc8ed540410db0b96c95b242b0e80313760e6f92fd7721e8ac67c626d18d07a31412986a01c21077f25b86bbcac297618c82063300ea5c5ca95c5f762fa345902a3c9dfd38720bfd32eb06003dc71444dd1da31d90153ca6db56e9554b4a93727bf482cd38d7e542343cb2912afd4177f81506704d90576bed9379879c104e4b743a26c1a83ac8be412e95b3776dccda9d4aee40791a34d703ce2678d11598257009e57e4d25912d55ccc05166f5084373e267bf7fdbfeb5dd312dab9057334862704a6beba6a7d5cb447e83f84f13d53a78c5c0fa15179fd8bb53a9fef163610dba8299a6f132cdea155b615a51d86b2b01b529788ea2bfa6b5616b012122f588343d7974f2e9a267fdb37b51647649ba0f9d42e0ddae96974054c7665c0131f0a8df1b1a5625cf72a43cbde9f28059217b9ebd6e2b7af7aad611417404661ba9e00d0d74259a8ce541927736afefe2ac5396f556aa3e2c5cfedab367a436f7c92b6ba563ff5ef6d58e729ebe0e181dc3b64b27cc75a91478851d324cc0a5c8446c0562cbf2f67157f7d29933d0fe959d2152c35dd5a168628b61ed7814a86243beea73aac94124f2480c62e06953a704f37645df4d9d98779570ffba0348762c2bd865dc27a1c190d356987f13e5782dc0589f60af871c6f880f99bbd0d3b01f214112549906e82a96591428ca1d8ceea232629b6eef5621527698343dfeaecf1d82adb10a3ec42b9e7a3f8a2b9bcd34b0c6df9c32672b13b39536e3ec16d1e08af2c63aa2f4c9e4094e78874fb38ace6cf943c180948888de4dd963b861ff79eb8d7aac73e2938c1d666e87e67c399ce2903477f7ccc074106f4a2cc129ac708194d8020664aac10e418a9b6ab7ac0639bd681d84e70b5d9bb5432bc5b12d2f5c214deadcec9b70fe41e7f5e321324b4aa0064d274f9fcdb76e013c786029d13a1f8a3568d2d453698c9fb58c588580e7dc7b88e66f1d7adb9e58ad74dcce9b87c0af1cc490d2d42a279bfdfb7a418c329c26f533938e540a5af3a9cd5e5ab3538201da286dc94b043b870788aa70fb0d61bb2c897109b7500e2a29c0f08e95d42180882d9c4423e2a4dc8e3d81719037dd0288b0bf1bf558490a96be74fe3e7e1bb2864408326f92378d85f6c25149a54aeddc5141cc8537b34c69ebb1c0445106a034f34d7f9ee43fa82b3c238c002f1405084e338948ed896790a9db046dda5b0426609a34bd278bc0aea20be4bb0ec374b5b09dfbeb15d5a7e79c9ca755e555d8bf425459b099599e35ac1ed3a8ce198f7865d49772813fb5eb5cfecb125858152be8b435e1602ea4b02c5a0c7c6830753574942fd22d1df343eb8422b1ec8c3f7ae7dc45abec7a5d66c5929f85e7af8c24c6d90857f25d735ba2c4beae91956719eca4eb8626a38ec3a763fb7c0517dfd67b90d054acf2b49bb0eaed2fe5810b846ead6352c3b3ef947d68f5810c1900cd25c514da93e15edfd6b4ad9d699cb92a2a7150ee4bf0c81e7c37a1bf971e7b610d6177ba7f2cf35e59a7e2728bb89f87e2396c62de4bdb1686779f6377b4a20e244a6fd1157d74e629eaf3aa83dcc61047135e27c32d13932b7710b534b9f8368d8bade8525d6eadc574eb6eadd5fd16aa7a8105398d5df79b276a144e28165953cbdc38fe72bd5797ab98be3648c6035bf860b5d8f0c79b68959bada28ccf0df8a8284550aa5b66dad8cb8e1040327c991f553d14b8b85efa988b5c6f55aac462f339e1602fa62318f3c1fba63599691161490799d952577cd40f094e98e28f688b72a2f528e00724d034369b904d48a950e439e14ba740f4356bd50b600af2f48b273ff11b6064704c047d41bb36c55ef7993f022edf5a5a1840df3a9092ecbdb9c65b493e99967cd7eaf54198f8a4ced7ac7cf606337b09c9a2f0d447e528f8ecf0bd7109759c07150d7384f73ccfab696d5176f20bb1679b7b2a87856576cf6308b771cec3d20729b68ed0e6403c3fc0fb3f1fe0e3656f17be91b99bb14f587600b9b886f649a85c6cbc1bee5d0aa6d369c178a79df97b23acc7d33b511536e5414e3e3f8071776d037508a7b230a72c654fd01059fd71be93d95184f6e31a950a6b13bba055faa2ed70b14714ec18bca4d23bfe655242eb9b8f1536aeff3da9d3cb474ec5ae5547e7676163c3ca439d6cd2d19ad90c62304d9d6611c5c1ddd8231256d58f92c516e757614bdbf2ce393614ba4e8125f610d1eb2ccedffc9e674f8c9c768a811e18c6d274a2a97e91a83fecffd80241f97854ef0c206f73349f2c596eaba1e366f7f88771e0cb53d65c3fb470609df204fc96198d84c56294c0440133d4d1e2651438e4c740af8fe7205153a739ec4009a9e84dac4c474e9eb67b7a6b123e3d0c5189494958229389c4d9df05939d7dc048bfe470befd815416a47f3eed8dc7e36fce2fa39a4c9828950c047b52d2ace88722382f00de40bb5514b8ad3fbe1f725d2d41ae4f9ba15e9c9a44f971b33b7d65b73c99c8a068b7f5f5a245f856fdfedaaad1d7db3909f79e5fabbb0eea2d44f1f48af43171bb736be2bc7d2c00b3e42dbe5dde998e5fe0321637ca0f338a2a507256ad0c0f3ee6081a974360729918b70b7821c638f15ee86ee965eecd06562d21156a57311109044a3415dfdf26122eaff080596919c319d80da415eb9519d1cc04e87cd2c0dffd9b30cfd0c40e3e0879d8d4c34a245a2eff4630122f2bfaa6f47375592d6d48ad7b9b9241d06818f39e2ae6a4f016254a3271809f8e4806af415e912e801b807a814ae87a30a492cebc43dcad8da9eac2671a71499ff4625e9955b509101bfb304c7ed23f24dad69f16f31f6f3d1d00b794349991a52d3630eee6dc609ff3175f5553caefba5b97ea22d22bf7d2473b21b66d49e3f1d121aaa27e0d28f170ef38ec9deb3c7f619a4866fd31a76118e8d8bbb3cdd72a7272780710e2d57da8f5eb9e2af36a652e2c18c1249ec1f828fa8adb5596a9b3b484b44721afcfc5759a32b3b5372a9d234d3d9583782d2175af76d71bceeeec41575fcb1501451a46f2e72b2fe234a8b1ac00292e4fc36ea0fa1611557f51f5ba1e10f4a6a6b4c0e98baabb9bbcba944e44c07869151ed7bf15889a7a739483c9e06ce3aa4b561825b551a3a11c2282f43fff36b33e5d825677bf2ef1aa866c34a129e749c8a11022692fc49bef432b04099b4360966598f83c4d84f4b7be802e83bfecc33f67bddbd47b310047d8ceb27fc07a383f"}, 0x1004) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x1, 0x12}, {0x9000, 0x7ff, 0xffff, 0x0, [0x4, 0x0, 0xb6b9, 0x5, 0x6]}}}}, 0x1f) (async) [ 481.894494][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 481.902799][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:53 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5a}, "2a5e514a9e7eec90e0d871756aef92d88df428fe8ee9093a8bc24ce92508ae7fb5a4ba18f0ae45b5b75775fe81020ea13237d4d44df8339f4d134a57542fefb10fe859f907c5c454e83fcf46023ced08546759b63e128d581f7a"}, 0x5e) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:57:53 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca"], 0xcd) 03:57:53 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca"], 0xcd) 03:57:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xc0) 03:57:53 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000aa83693f8d59e1f428d32049c94b000000000000aaaaaaaa090000"], 0x1d) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"/313], 0x9) 03:57:53 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc9, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="fb3a1c28af02069f"], 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 03:57:53 executing program 4: syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x1, 0x12}, {0x9000, 0x7ff, 0xffff, 0x0, [0x4, 0x0, 0xb6b9, 0x5, 0x6]}}}}, 0x1f) (rerun: 64) [ 482.034616][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:53 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc9, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="fb3a1c28af02069f"], 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc9, 0x9}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="fb3a1c28af02069f"], 0x9) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) (async) 03:57:53 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x1004) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x6, 0xc9, {0x80, 0x5, 0x2, 0x1f, 0x1}}}}, 0x17) 03:57:53 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5a}, "2a5e514a9e7eec90e0d871756aef92d88df428fe8ee9093a8bc24ce92508ae7fb5a4ba18f0ae45b5b75775fe81020ea13237d4d44df8339f4d134a57542fefb10fe859f907c5c454e83fcf46023ced08546759b63e128d581f7a"}, 0x5e) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5a}, "2a5e514a9e7eec90e0d871756aef92d88df428fe8ee9093a8bc24ce92508ae7fb5a4ba18f0ae45b5b75775fe81020ea13237d4d44df8339f4d134a57542fefb10fe859f907c5c454e83fcf46023ced08546759b63e128d581f7a"}, 0x5e) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 03:57:53 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000ffffffffffff000000000000"], 0xcd) 03:57:53 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc9, 0x9}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="fb3a1c28af02069f"], 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 03:57:53 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x1004) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x6, 0xc9, {0x80, 0x5, 0x2, 0x1f, 0x1}}}}, 0x17) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x1004) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x6, 0xc9, {0x80, 0x5, 0x2, 0x1f, 0x1}}}}, 0x17) (async) 03:57:53 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x89}, "b4eae994e192335448cfa2d06f16bcaaaf90a5fb79081ef63f16bed2011f57d63a5e0255a915ad55b6f1ea0e722a89156ddea61ed1f993208a8ac0ea7b66d5e2c04730e1c360bcaf5a52ba95f78f5c6303b46fdc3e8e5e48b608b89bc60b031f2f101d625413effec16e94ab3d1a01bc0d13c56a516975f4ad1f6f25abfd0eb8bac3d2e1a6b7e91635"}, 0x8d) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) 03:57:53 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5a}, "2a5e514a9e7eec90e0d871756aef92d88df428fe8ee9093a8bc24ce92508ae7fb5a4ba18f0ae45b5b75775fe81020ea13237d4d44df8339f4d134a57542fefb10fe859f907c5c454e83fcf46023ced08546759b63e128d581f7a"}, 0x5e) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5a}, "2a5e514a9e7eec90e0d871756aef92d88df428fe8ee9093a8bc24ce92508ae7fb5a4ba18f0ae45b5b75775fe81020ea13237d4d44df8339f4d134a57542fefb10fe859f907c5c454e83fcf46023ced08546759b63e128d581f7a"}, 0x5e) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) [ 482.184338][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 482.195495][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 482.195523][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d [ 482.196728][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 482.283717][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 482.336086][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 482.346803][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x700) 03:57:53 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d"], 0xcd) 03:57:53 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x1004) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x6, 0xc9, {0x80, 0x5, 0x2, 0x1f, 0x1}}}}, 0x17) 03:57:53 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x89}, "b4eae994e192335448cfa2d06f16bcaaaf90a5fb79081ef63f16bed2011f57d63a5e0255a915ad55b6f1ea0e722a89156ddea61ed1f993208a8ac0ea7b66d5e2c04730e1c360bcaf5a52ba95f78f5c6303b46fdc3e8e5e48b608b89bc60b031f2f101d625413effec16e94ab3d1a01bc0d13c56a516975f4ad1f6f25abfd0eb8bac3d2e1a6b7e91635"}, 0x8d) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) 03:57:53 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040000000000aaaaaa8200"/29], 0x1d) 03:57:53 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x10) 03:57:53 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async, rerun: 32) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040000000000aaaaaa8200"/29], 0x1d) 03:57:53 executing program 0: ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c3dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) [ 482.466885][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:53 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d"], 0xcd) 03:57:53 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040000000000aaaaaa8200"/29], 0x1d) 03:57:53 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x89}, "b4eae994e192335448cfa2d06f16bcaaaf90a5fb79081ef63f16bed2011f57d63a5e0255a915ad55b6f1ea0e722a89156ddea61ed1f993208a8ac0ea7b66d5e2c04730e1c360bcaf5a52ba95f78f5c6303b46fdc3e8e5e48b608b89bc60b031f2f101d625413effec16e94ab3d1a01bc0d13c56a516975f4ad1f6f25abfd0eb8bac3d2e1a6b7e91635"}, 0x8d) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) 03:57:53 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x10) (async) [ 482.626918][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:54 executing program 0: ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c3dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c3dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) (async) 03:57:54 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d"], 0xcd) 03:57:54 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@none, 0x8, 0xff, 0x8, "9eb3d6", 0x1, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x0, 0x3, 'ruP', 0x7, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbf, 0x7, 0x7, "6866b8", 0xf1f, 0x4}, {@any, 0x1f, 0x2, 0xe5, "8d88cf", 0x8, 0x1}]}}}, 0x40) 03:57:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x1100) 03:57:54 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:57:54 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x10) (async) 03:57:54 executing program 0: ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c3dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) 03:57:54 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@none, 0x8, 0xff, 0x8, "9eb3d6", 0x1, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x0, 0x3, 'ruP', 0x7, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbf, 0x7, 0x7, "6866b8", 0xf1f, 0x4}, {@any, 0x1f, 0x2, 0xe5, "8d88cf", 0x8, 0x1}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@none, 0x8, 0xff, 0x8, "9eb3d6", 0x1, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x0, 0x3, 'ruP', 0x7, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbf, 0x7, 0x7, "6866b8", 0xf1f, 0x4}, {@any, 0x1f, 0x2, 0xe5, "8d88cf", 0x8, 0x1}]}}}, 0x40) (async) 03:57:54 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "f42392e98511f6c21109aa8acda8f4ea5bfa38c88289fea8903dda561fbd762bbd24ab2078b5cade520f5e69a6d46a00b9c2030486afcde4a2c8137caf0677597da7992ad384ff894d7467ead06b66b349a764f9ac1a1086d104c13dd1b985c25bfab1c3b822700746dec2e92f95e5de326f38097be29897c094d41b063deb820a184da7b2bad3958f33e68e0c8059b7afd3e1e8dcf7ab2d283f6f80144f8847635b0719e893a9585ea4201081e6a40bcf21fd7817d968f0674eb61db2301940190c4c38de70404a35770d58ef13118e9af87bd671fc9c93ad9fdcfdb0f67f07c418bc8ff1e49233ab5fbeff789b2755c3204abd29b4931b"}}}, 0x102) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x80, 0xc8}}}, 0x7) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x24, 0x10}, {0x3, 0x1f, 0xffff, 0x4, [0x1, 0x5, 0x3, 0x20]}}}}, 0x1d) 03:57:54 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:57:54 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000ffffffff"], 0xcd) [ 482.800358][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:54 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@none, 0x8, 0xff, 0x8, "9eb3d6", 0x1, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x0, 0x3, 'ruP', 0x7, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbf, 0x7, 0x7, "6866b8", 0xf1f, 0x4}, {@any, 0x1f, 0x2, 0xe5, "8d88cf", 0x8, 0x1}]}}}, 0x40) [ 482.866120][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:54 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "f42392e98511f6c21109aa8acda8f4ea5bfa38c88289fea8903dda561fbd762bbd24ab2078b5cade520f5e69a6d46a00b9c2030486afcde4a2c8137caf0677597da7992ad384ff894d7467ead06b66b349a764f9ac1a1086d104c13dd1b985c25bfab1c3b822700746dec2e92f95e5de326f38097be29897c094d41b063deb820a184da7b2bad3958f33e68e0c8059b7afd3e1e8dcf7ab2d283f6f80144f8847635b0719e893a9585ea4201081e6a40bcf21fd7817d968f0674eb61db2301940190c4c38de70404a35770d58ef13118e9af87bd671fc9c93ad9fdcfdb0f67f07c418bc8ff1e49233ab5fbeff789b2755c3204abd29b4931b"}}}, 0x102) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x80, 0xc8}}}, 0x7) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x24, 0x10}, {0x3, 0x1f, 0xffff, 0x4, [0x1, 0x5, 0x3, 0x20]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "f42392e98511f6c21109aa8acda8f4ea5bfa38c88289fea8903dda561fbd762bbd24ab2078b5cade520f5e69a6d46a00b9c2030486afcde4a2c8137caf0677597da7992ad384ff894d7467ead06b66b349a764f9ac1a1086d104c13dd1b985c25bfab1c3b822700746dec2e92f95e5de326f38097be29897c094d41b063deb820a184da7b2bad3958f33e68e0c8059b7afd3e1e8dcf7ab2d283f6f80144f8847635b0719e893a9585ea4201081e6a40bcf21fd7817d968f0674eb61db2301940190c4c38de70404a35770d58ef13118e9af87bd671fc9c93ad9fdcfdb0f67f07c418bc8ff1e49233ab5fbeff789b2755c3204abd29b4931b"}}}, 0x102) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x80, 0xc8}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x24, 0x10}, {0x3, 0x1f, 0xffff, 0x4, [0x1, 0x5, 0x3, 0x20]}}}}, 0x1d) (async) 03:57:54 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d"], 0xcd) [ 482.940301][ T3658] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 482.940335][ T3658] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:54 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000000)=[0xfffffff8, 0x0, 0x6], 0x3, 0x81800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)) r2 = dup(r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000004700)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd, 0x7f, 0x0, 0x0, 0x8, 0x0, {0x0, r4}}, 0xffff) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) [ 483.019113][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 483.034760][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 483.046069][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x1f00) 03:57:54 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x8, @mcast1, 0xa9f}]}, &(0x7f0000000200)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000440)={r6, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={r7, 0x1f, "06f6bc71944021eec388f73801c50e792ccfc4b980add9ba145159236c5dcc"}, &(0x7f0000000380)=0x27) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)={r8, 0x2d, "2812d4590fb42f12f83a29080a9eb4f6499a6438dfb7bb625fd25d22b767345dd1d637b568a0f7f89db43d1888"}, &(0x7f0000000400)=0x35) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r3, 0xc0, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x9, @local, 0xf1b}, @in6={0xa, 0x4e23, 0x8, @empty, 0x37}, @in6={0xa, 0x4e21, 0x200, @local, 0x5f36f859}, @in6={0xa, 0x4e23, 0x80000001, @loopback, 0x598}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000280)={r9, 0x400000}, &(0x7f00000002c0)=0x8) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1d) 03:57:54 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:57:54 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "f42392e98511f6c21109aa8acda8f4ea5bfa38c88289fea8903dda561fbd762bbd24ab2078b5cade520f5e69a6d46a00b9c2030486afcde4a2c8137caf0677597da7992ad384ff894d7467ead06b66b349a764f9ac1a1086d104c13dd1b985c25bfab1c3b822700746dec2e92f95e5de326f38097be29897c094d41b063deb820a184da7b2bad3958f33e68e0c8059b7afd3e1e8dcf7ab2d283f6f80144f8847635b0719e893a9585ea4201081e6a40bcf21fd7817d968f0674eb61db2301940190c4c38de70404a35770d58ef13118e9af87bd671fc9c93ad9fdcfdb0f67f07c418bc8ff1e49233ab5fbeff789b2755c3204abd29b4931b"}}}, 0x102) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x80, 0xc8}}}, 0x7) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x24, 0x10}, {0x3, 0x1f, 0xffff, 0x4, [0x1, 0x5, 0x3, 0x20]}}}}, 0x1d) 03:57:54 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000000)=[0xfffffff8, 0x0, 0x6], 0x3, 0x81800, 0x0, 0xffffffffffffffff}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)) (async) r2 = dup(r1) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000004700)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd, 0x7f, 0x0, 0x0, 0x8, 0x0, {0x0, r4}}, 0xffff) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r4) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:57:54 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d"], 0xcd) 03:57:54 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d"], 0xcd) 03:57:54 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b32035cddc7f62000016ff708e3b9ae300000000000000"], 0x20) [ 483.171421][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 483.206264][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:54 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b32035cddc7f62000016ff708e3b9ae300000000000000"], 0x20) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b32035cddc7f62000016ff708e3b9ae300000000000000"], 0x20) (async) 03:57:54 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000000)=[0xfffffff8, 0x0, 0x6], 0x3, 0x81800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)) (rerun: 32) r2 = dup(r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000004700)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd, 0x7f, 0x0, 0x0, 0x8, 0x0, {0x0, r4}}, 0xffff) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r4) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) [ 483.244695][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:54 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000"], 0xcd) 03:57:54 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 483.364622][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 483.366075][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 483.372413][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 483.411679][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 483.411708][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x2000) 03:57:54 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x8, @mcast1, 0xa9f}]}, &(0x7f0000000200)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000440)={r6, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={r7, 0x1f, "06f6bc71944021eec388f73801c50e792ccfc4b980add9ba145159236c5dcc"}, &(0x7f0000000380)=0x27) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)={r8, 0x2d, "2812d4590fb42f12f83a29080a9eb4f6499a6438dfb7bb625fd25d22b767345dd1d637b568a0f7f89db43d1888"}, &(0x7f0000000400)=0x35) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r3, 0xc0, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x9, @local, 0xf1b}, @in6={0xa, 0x4e23, 0x8, @empty, 0x37}, @in6={0xa, 0x4e21, 0x200, @local, 0x5f36f859}, @in6={0xa, 0x4e23, 0x80000001, @loopback, 0x598}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000280)={r9, 0x400000}, &(0x7f00000002c0)=0x8) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="043e1a0d010200f7f480c148aaaaaaaa000031c75ad54ad8b475c21a58ec1263b57954449282aa25768be40db8d47370839cb3abd98bbfe1684e442b57e0aa0eddc6f421afcc55c5f2fb407dbebdbd6d12dab1538a0ee94a1e9860635dd159e6226783bf484f6ee13c54768c475cb5974559357e3e161fe154903e7a222f29fb3e509674d8293d57c2656ae94a9aca0ccff8acd185d3fa8311b1b14a1f37c6339cede7f4f15eea7c5e98020b7536556ef5b4559d9d9b44a9508ddd6b43d504f3bb3ce02077bf84a9510029cabe44fa25221b05e89a01fca3b4f6835374218cc40f91d728e6d473105046c65a0761d2bdcb0e3859faadc33f92057fd26439a374b32739f375446e6d62b28cf697672fdde4bd567e04508702a304d93acfc25235dcfff26498947c81521b1b91de46a1bfdb31fbebbc93a1adab79967388d14ed48a4d61b8f2a8f0758459b71f030cc22da8dbff82a663fcc8e6000000000000000000"], 0x1d) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x8, @mcast1, 0xa9f}]}, &(0x7f0000000200)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000440)={r6, 0x8}, 0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={r7, 0x1f, "06f6bc71944021eec388f73801c50e792ccfc4b980add9ba145159236c5dcc"}, &(0x7f0000000380)=0x27) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)={r8, 0x2d, "2812d4590fb42f12f83a29080a9eb4f6499a6438dfb7bb625fd25d22b767345dd1d637b568a0f7f89db43d1888"}, &(0x7f0000000400)=0x35) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r3, 0xc0, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x9, @local, 0xf1b}, @in6={0xa, 0x4e23, 0x8, @empty, 0x37}, @in6={0xa, 0x4e21, 0x200, @local, 0x5f36f859}, @in6={0xa, 0x4e23, 0x80000001, @loopback, 0x598}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x400200, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000280)={r9, 0x400000}, &(0x7f00000002c0)=0x8) (async) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1d) (async) 03:57:54 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b32035cddc7f62000016ff708e3b9ae300000000000000"], 0x20) 03:57:54 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:57:54 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000"], 0xcd) 03:57:54 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0x10}, {0x7, 0x6, 0x1ff, 0x1, [0x3, 0x6, 0xc61, 0x6]}}}}, 0x1d) 03:57:55 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040b0b94b1c4739a6106f5ad0e28"], 0xe) 03:57:55 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0x10}, {0x7, 0x6, 0x1ff, 0x1, [0x3, 0x6, 0xc61, 0x6]}}}}, 0x1d) 03:57:55 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d"], 0xcd) [ 483.561502][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 483.567804][ T3658] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 483.569355][ T3658] Bluetooth: hci4: Malformed LE Event: 0x0d [ 483.596451][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:55 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:57:55 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x8, @mcast1, 0xa9f}]}, &(0x7f0000000200)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000440)={r6, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={r7, 0x1f, "06f6bc71944021eec388f73801c50e792ccfc4b980add9ba145159236c5dcc"}, &(0x7f0000000380)=0x27) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)={r8, 0x2d, "2812d4590fb42f12f83a29080a9eb4f6499a6438dfb7bb625fd25d22b767345dd1d637b568a0f7f89db43d1888"}, &(0x7f0000000400)=0x35) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r3, 0xc0, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x9, @local, 0xf1b}, @in6={0xa, 0x4e23, 0x8, @empty, 0x37}, @in6={0xa, 0x4e21, 0x200, @local, 0x5f36f859}, @in6={0xa, 0x4e23, 0x80000001, @loopback, 0x598}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000280)={r9, 0x400000}, &(0x7f00000002c0)=0x8) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1d) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x8, @mcast1, 0xa9f}]}, &(0x7f0000000200)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000440)={r6, 0x8}, 0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={r7, 0x1f, "06f6bc71944021eec388f73801c50e792ccfc4b980add9ba145159236c5dcc"}, &(0x7f0000000380)=0x27) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)={r8, 0x2d, "2812d4590fb42f12f83a29080a9eb4f6499a6438dfb7bb625fd25d22b767345dd1d637b568a0f7f89db43d1888"}, &(0x7f0000000400)=0x35) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r3, 0xc0, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x9, @local, 0xf1b}, @in6={0xa, 0x4e23, 0x8, @empty, 0x37}, @in6={0xa, 0x4e21, 0x200, @local, 0x5f36f859}, @in6={0xa, 0x4e23, 0x80000001, @loopback, 0x598}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x400200, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000280)={r9, 0x400000}, &(0x7f00000002c0)=0x8) (async) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="043e1a0d010200f7f480c148aaaaaaaa000031c75ad54ad8b475c21a58ec1263b57954449282aa25768be40db8d47370839cb3abd98bbfe1684e442b57e0aa0eddc6f421afcc55c5f2fb407dbebdbd6d12dab1538a0ee94a1e9860635dd159e6226783bf484f6ee13c54768c475cb5974559357e3e161fe154903e7a222f29fb3e509674d8293d57c2656ae94a9aca0ccff8acd185d3fa8311b1b14a1f37c6339cede7f4f15eea7c5e98020b7536556ef5b4559d9d9b44a9508ddd6b43d504f3bb3ce02077bf84a9510029cabe44fa25221b05e89a01fca3b4f6835374218cc40f91d728e6d473105046c65a0761d2bdcb0e3859faadc33f92057fd26439a374b32739f375446e6d62b28cf697672fdde4bd567e04508702a304d93acfc25235dcfff26498947c81521b1b91de46a1bfdb31fbebbc93a1adab79967388d14ed48a4d61b8f2a8f0758459b71f030cc22da8dbff82a663fcc8e6000000000000000000"], 0x1d) (async) 03:57:55 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0x10}, {0x7, 0x6, 0x1ff, 0x1, [0x3, 0x6, 0xc61, 0x6]}}}}, 0x1d) [ 483.734775][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x3e80) 03:57:55 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040b0b94b1c4739a6106f5ad0e28"], 0xe) 03:57:55 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9703c0038000100072204050000000004451a00010004000409027632030d3100080004090302070200fcff0200000006003e00950c0600103f04003f000400"], 0x41) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x25}, @l2cap_cid_signaling={{0x21}, [@l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x1, 0x9, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x7f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xf7, 0x8}, {0x0, 0x7f9, 0x5, 0x5}}]}}, 0x2a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x5b}, "bdfdd76780518310d8f6513bfe5b5e0be1b244431e8c2637e74e33ef6c3ef55194b08f4dced3fc0e776db365f687f0074558b20bc80ced3f1f39da1119a3a4d5f58b5779a210c81912378ce0525b29fbceb7925aeb6af4dc7fda0b"}, 0x5f) 03:57:55 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d"], 0xcd) 03:57:55 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r1, {0x1}}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x37}, @l2cap_cid_signaling={{0x33}, [@l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0xb39, 0xfff, 0xfff}}, @l2cap_create_chan_req={{0xc, 0x5f, 0x5}, {0x5, 0x3, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x0, 0x5}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x4}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0xb263, 0x90}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x6, 0x20}}]}}, 0x3c) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x500, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x6, 0x4}, {0x1}}]}}, 0x11) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040840}, 0x2000000) write$FUSE_OPEN(r3, &(0x7f0000000180)={0x20, 0xfffffffffffffff5, r1, {0x0, 0x4}}, 0x20) 03:57:55 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14088}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_getaddr={0x18, 0x16, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x38, 0x4e, 0xff, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) 03:57:55 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040b0b94b1c4739a6106f5ad0e28"], 0xe) 03:57:55 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d"], 0xcd) 03:57:55 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9703c0038000100072204050000000004451a00010004000409027632030d3100080004090302070200fcff0200000006003e00950c0600103f04003f000400"], 0x41) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x25}, @l2cap_cid_signaling={{0x21}, [@l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x1, 0x9, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x7f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xf7, 0x8}, {0x0, 0x7f9, 0x5, 0x5}}]}}, 0x2a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x5b}, "bdfdd76780518310d8f6513bfe5b5e0be1b244431e8c2637e74e33ef6c3ef55194b08f4dced3fc0e776db365f687f0074558b20bc80ced3f1f39da1119a3a4d5f58b5779a210c81912378ce0525b29fbceb7925aeb6af4dc7fda0b"}, 0x5f) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9703c0038000100072204050000000004451a00010004000409027632030d3100080004090302070200fcff0200000006003e00950c0600103f04003f000400"], 0x41) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x25}, @l2cap_cid_signaling={{0x21}, [@l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x1, 0x9, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x7f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xf7, 0x8}, {0x0, 0x7f9, 0x5, 0x5}}]}}, 0x2a) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x5b}, "bdfdd76780518310d8f6513bfe5b5e0be1b244431e8c2637e74e33ef6c3ef55194b08f4dced3fc0e776db365f687f0074558b20bc80ced3f1f39da1119a3a4d5f58b5779a210c81912378ce0525b29fbceb7925aeb6af4dc7fda0b"}, 0x5f) (async) 03:57:55 executing program 4: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {r0, r1/1000+10000}}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e030000000000000030352e0299cddc7f6200000000000000000002000000"], 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x500, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x47}, {0x5, [{@none, 0x0, 0xff, 0x2, "a1d5fb", 0x4}, {@none, 0x8, 0x5, 0x7, "bdeb0d"}, {@any, 0x9, 0x0, 0x3, "69f955", 0x8}, {@none, 0x8, 0xfb, 0x9, "9cefe9", 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6d, 0x9, 0x1f, "bae87a", 0x8}]}}}, 0x4a) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'system.', '&]-\xb1!}h\x00'}, &(0x7f0000000380)='}#@\x00', 0x4, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r3, 0x2002}, {0xffffffffffffffff, 0xe000}, {}], 0x3, &(0x7f0000000180)={r4, r5+10000000}, &(0x7f00000001c0)={[0x9]}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x80, 0x4}, {0x0, 0x8}}}}, 0x11) 03:57:55 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d9811"], 0xcd) 03:57:55 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9703c0038000100072204050000000004451a00010004000409027632030d3100080004090302070200fcff0200000006003e00950c0600103f04003f000400"], 0x41) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x25}, @l2cap_cid_signaling={{0x21}, [@l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x1, 0x9, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x7f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xf7, 0x8}, {0x0, 0x7f9, 0x5, 0x5}}]}}, 0x2a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x5b}, "bdfdd76780518310d8f6513bfe5b5e0be1b244431e8c2637e74e33ef6c3ef55194b08f4dced3fc0e776db365f687f0074558b20bc80ced3f1f39da1119a3a4d5f58b5779a210c81912378ce0525b29fbceb7925aeb6af4dc7fda0b"}, 0x5f) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9703c0038000100072204050000000004451a00010004000409027632030d3100080004090302070200fcff0200000006003e00950c0600103f04003f000400"], 0x41) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x25}, @l2cap_cid_signaling={{0x21}, [@l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x1, 0x9, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x7f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xf7, 0x8}, {0x0, 0x7f9, 0x5, 0x5}}]}}, 0x2a) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x5b}, "bdfdd76780518310d8f6513bfe5b5e0be1b244431e8c2637e74e33ef6c3ef55194b08f4dced3fc0e776db365f687f0074558b20bc80ced3f1f39da1119a3a4d5f58b5779a210c81912378ce0525b29fbceb7925aeb6af4dc7fda0b"}, 0x5f) (async) [ 483.947843][ T3658] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 484.064537][ T3658] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 484.140334][ T3658] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 484.147920][ T3658] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:55 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d9811"], 0xcd) 03:57:55 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x500, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRES64=r3, @ANYRES8=r2, @ANYRES32=r1, @ANYRESOCT=r4, @ANYBLOB="d74b37962dedbcf5074eadeaed20db458bbb9dd8038f2a8e39d4467b7d8ecc30eba48d9855fbc70b83d4abe4644281f75e056686aa1edcb4ab3553233e7e1cfe3512a8790ccbf1d4340cf518218993"], 0x10) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) write$binfmt_misc(r7, &(0x7f0000000100)={'syz0', "ee1f2d13fae6ccfeadfd3ad80c53e92f4a83880a526e1d9af9b7e3674f09411f34c510dc2f3962fe9db363044972136b674520ce247db64705c8733c0df532ef4caa6445c270398657e29c33206043301eeb86224f371f0ca3c76859e3983cc7ee634e9d1d47fe89f8b0b7ec8ee0958b81a227f6af0bef958066616e6fa56b5b71836e3a1580ebff61bba2fe6d6882c966867fb5e1d4048dfb4af8e8712f3fdd1720c724f5bff82eb072d2c260f5b4b4113f072c01cd2d1d8374d3de876c"}, 0xc2) fallocate(r3, 0x58, 0x1, 0x5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x500, 0x0) syncfs(r8) 03:57:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x3ec0) 03:57:55 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d"], 0xcd) [ 484.307695][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:56 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d"], 0xcd) 03:57:56 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14088}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_getaddr={0x18, 0x16, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x38, 0x4e, 0xff, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14088}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_getaddr={0x18, 0x16, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x38, 0x4e, 0xff, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) 03:57:56 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r1, {0x1}}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x37}, @l2cap_cid_signaling={{0x33}, [@l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0xb39, 0xfff, 0xfff}}, @l2cap_create_chan_req={{0xc, 0x5f, 0x5}, {0x5, 0x3, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x0, 0x5}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x4}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0xb263, 0x90}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x6, 0x20}}]}}, 0x3c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x500, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x6, 0x4}, {0x1}}]}}, 0x11) (async) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040840}, 0x2000000) (async, rerun: 32) write$FUSE_OPEN(r3, &(0x7f0000000180)={0x20, 0xfffffffffffffff5, r1, {0x0, 0x4}}, 0x20) (rerun: 32) 03:57:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x3f00) 03:57:56 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d"], 0xcd) 03:57:56 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98"], 0xcd) 03:57:56 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async, rerun: 32) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r1, {0x1}}, 0x18) (async, rerun: 64) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x37}, @l2cap_cid_signaling={{0x33}, [@l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0xb39, 0xfff, 0xfff}}, @l2cap_create_chan_req={{0xc, 0x5f, 0x5}, {0x5, 0x3, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x0, 0x5}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x4}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0xb263, 0x90}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x6, 0x20}}]}}, 0x3c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x500, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x6, 0x4}, {0x1}}]}}, 0x11) (async) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040840}, 0x2000000) (async, rerun: 64) write$FUSE_OPEN(r3, &(0x7f0000000180)={0x20, 0xfffffffffffffff5, r1, {0x0, 0x4}}, 0x20) (rerun: 64) 03:57:56 executing program 4: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {r0, r1/1000+10000}}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e030000000000000030352e0299cddc7f6200000000000000000002000000"], 0x20) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x500, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x47}, {0x5, [{@none, 0x0, 0xff, 0x2, "a1d5fb", 0x4}, {@none, 0x8, 0x5, 0x7, "bdeb0d"}, {@any, 0x9, 0x0, 0x3, "69f955", 0x8}, {@none, 0x8, 0xfb, 0x9, "9cefe9", 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6d, 0x9, 0x1f, "bae87a", 0x8}]}}}, 0x4a) (async) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'system.', '&]-\xb1!}h\x00'}, &(0x7f0000000380)='}#@\x00', 0x4, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r3, 0x2002}, {0xffffffffffffffff, 0xe000}, {}], 0x3, &(0x7f0000000180)={r4, r5+10000000}, &(0x7f00000001c0)={[0x9]}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x80, 0x4}, {0x0, 0x8}}}}, 0x11) 03:57:56 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (rerun: 64) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14088}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_getaddr={0x18, 0x16, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x38, 0x4e, 0xff, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) [ 484.971834][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:56 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) (async, rerun: 64) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x500, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRES64=r3, @ANYRES8=r2, @ANYRES32=r1, @ANYRESOCT=r4, @ANYBLOB="d74b37962dedbcf5074eadeaed20db458bbb9dd8038f2a8e39d4467b7d8ecc30eba48d9855fbc70b83d4abe4644281f75e056686aa1edcb4ab3553233e7e1cfe3512a8790ccbf1d4340cf518218993"], 0x10) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) write$binfmt_misc(r7, &(0x7f0000000100)={'syz0', "ee1f2d13fae6ccfeadfd3ad80c53e92f4a83880a526e1d9af9b7e3674f09411f34c510dc2f3962fe9db363044972136b674520ce247db64705c8733c0df532ef4caa6445c270398657e29c33206043301eeb86224f371f0ca3c76859e3983cc7ee634e9d1d47fe89f8b0b7ec8ee0958b81a227f6af0bef958066616e6fa56b5b71836e3a1580ebff61bba2fe6d6882c966867fb5e1d4048dfb4af8e8712f3fdd1720c724f5bff82eb072d2c260f5b4b4113f072c01cd2d1d8374d3de876c"}, 0xc2) (async) fallocate(r3, 0x58, 0x1, 0x5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x500, 0x0) (async) syncfs(r8) 03:57:56 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98"], 0xcd) 03:57:56 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000400)="fb", 0x1) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000180)={0x8, 0x4, [0x7f]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r0, 0x0, 0x500, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r5, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r7, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000005200000428bd00010000000000007e33ad", @ANYRES32=0x0, @ANYBLOB="080006000010000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000600018000000800060003000000080006000300000008000100", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x40014}, 0x20004000) ioctl$TIOCNXCL(r0, 0x540d) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x500, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x15db7702649aa45}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:57:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x803e) 03:57:56 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98"], 0xcd) 03:57:56 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x500, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRES64=r3, @ANYRES8=r2, @ANYRES32=r1, @ANYRESOCT=r4, @ANYBLOB="d74b37962dedbcf5074eadeaed20db458bbb9dd8038f2a8e39d4467b7d8ecc30eba48d9855fbc70b83d4abe4644281f75e056686aa1edcb4ab3553233e7e1cfe3512a8790ccbf1d4340cf518218993"], 0x10) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) write$binfmt_misc(r7, &(0x7f0000000100)={'syz0', "ee1f2d13fae6ccfeadfd3ad80c53e92f4a83880a526e1d9af9b7e3674f09411f34c510dc2f3962fe9db363044972136b674520ce247db64705c8733c0df532ef4caa6445c270398657e29c33206043301eeb86224f371f0ca3c76859e3983cc7ee634e9d1d47fe89f8b0b7ec8ee0958b81a227f6af0bef958066616e6fa56b5b71836e3a1580ebff61bba2fe6d6882c966867fb5e1d4048dfb4af8e8712f3fdd1720c724f5bff82eb072d2c260f5b4b4113f072c01cd2d1d8374d3de876c"}, 0xc2) fallocate(r3, 0x58, 0x1, 0x5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x500, 0x0) syncfs(r8) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) (async) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r6, 0x0, r5, 0x0, 0x500, 0x0) (async) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRES64=r3, @ANYRES8=r2, @ANYRES32=r1, @ANYRESOCT=r4, @ANYBLOB="d74b37962dedbcf5074eadeaed20db458bbb9dd8038f2a8e39d4467b7d8ecc30eba48d9855fbc70b83d4abe4644281f75e056686aa1edcb4ab3553233e7e1cfe3512a8790ccbf1d4340cf518218993"], 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) (async) write$binfmt_misc(r7, &(0x7f0000000100)={'syz0', "ee1f2d13fae6ccfeadfd3ad80c53e92f4a83880a526e1d9af9b7e3674f09411f34c510dc2f3962fe9db363044972136b674520ce247db64705c8733c0df532ef4caa6445c270398657e29c33206043301eeb86224f371f0ca3c76859e3983cc7ee634e9d1d47fe89f8b0b7ec8ee0958b81a227f6af0bef958066616e6fa56b5b71836e3a1580ebff61bba2fe6d6882c966867fb5e1d4048dfb4af8e8712f3fdd1720c724f5bff82eb072d2c260f5b4b4113f072c01cd2d1d8374d3de876c"}, 0xc2) (async) fallocate(r3, 0x58, 0x1, 0x5) (async) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r9, 0x0, r8, 0x0, 0x500, 0x0) (async) syncfs(r8) (async) [ 485.165915][ T3658] Bluetooth: hci4: Malformed LE Event: 0x0d [ 485.205015][ T3658] Bluetooth: hci4: Malformed LE Event: 0x0d 03:57:56 executing program 2: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {r0, r1/1000+10000}}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e030000000000000030352e0299cddc7f6200000000000000000002000000"], 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x500, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x47}, {0x5, [{@none, 0x0, 0xff, 0x2, "a1d5fb", 0x4}, {@none, 0x8, 0x5, 0x7, "bdeb0d"}, {@any, 0x9, 0x0, 0x3, "69f955", 0x8}, {@none, 0x8, 0xfb, 0x9, "9cefe9", 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6d, 0x9, 0x1f, "bae87a", 0x8}]}}}, 0x4a) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'system.', '&]-\xb1!}h\x00'}, &(0x7f0000000380)='}#@\x00', 0x4, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r3, 0x2002}, {0xffffffffffffffff, 0xe000}, {}], 0x3, &(0x7f0000000180)={r4, r5+10000000}, &(0x7f00000001c0)={[0x9]}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x80, 0x4}, {0x0, 0x8}}}}, 0x11) 03:57:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xc000) 03:57:56 executing program 1: fstat(0xffffffffffffffff, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) 03:57:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xc03e) [ 485.476522][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:57 executing program 4: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {r0, r1/1000+10000}}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e030000000000000030352e0299cddc7f6200000000000000000002000000"], 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x500, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x47}, {0x5, [{@none, 0x0, 0xff, 0x2, "a1d5fb", 0x4}, {@none, 0x8, 0x5, 0x7, "bdeb0d"}, {@any, 0x9, 0x0, 0x3, "69f955", 0x8}, {@none, 0x8, 0xfb, 0x9, "9cefe9", 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6d, 0x9, 0x1f, "bae87a", 0x8}]}}}, 0x4a) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'system.', '&]-\xb1!}h\x00'}, &(0x7f0000000380)='}#@\x00', 0x4, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r3, 0x2002}, {0xffffffffffffffff, 0xe000}, {}], 0x3, &(0x7f0000000180)={r4, r5+10000000}, &(0x7f00000001c0)={[0x9]}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x80, 0x4}, {0x0, 0x8}}}}, 0x11) clock_gettime(0x0, &(0x7f0000000080)) (async) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {r0, r1/1000+10000}}) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e030000000000000030352e0299cddc7f6200000000000000000002000000"], 0x20) (async) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000240)) (async) splice(r3, 0x0, r2, 0x0, 0x500, 0x0) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x47}, {0x5, [{@none, 0x0, 0xff, 0x2, "a1d5fb", 0x4}, {@none, 0x8, 0x5, 0x7, "bdeb0d"}, {@any, 0x9, 0x0, 0x3, "69f955", 0x8}, {@none, 0x8, 0xfb, 0x9, "9cefe9", 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6d, 0x9, 0x1f, "bae87a", 0x8}]}}}, 0x4a) (async) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'system.', '&]-\xb1!}h\x00'}, &(0x7f0000000380)='}#@\x00', 0x4, 0x2) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) ppoll(&(0x7f0000000100)=[{r3, 0x2002}, {0xffffffffffffffff, 0xe000}, {}], 0x3, &(0x7f0000000180)={r4, r5+10000000}, &(0x7f00000001c0)={[0x9]}, 0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x80, 0x4}, {0x0, 0x8}}}}, 0x11) (async) 03:57:57 executing program 1: fstat(0xffffffffffffffff, &(0x7f0000000080)) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) 03:57:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xff03) 03:57:57 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) [ 485.867825][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:57:57 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000400)="fb", 0x1) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000180)={0x8, 0x4, [0x7f]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r0, 0x0, 0x500, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r5, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r7, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000005200000428bd00010000000000007e33ad", @ANYRES32=0x0, @ANYBLOB="080006000010000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000600018000000800060003000000080006000300000008000100", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x40014}, 0x20004000) ioctl$TIOCNXCL(r0, 0x540d) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x500, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x15db7702649aa45}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) write(r2, &(0x7f0000000400)="fb", 0x1) (async) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000180)={0x8, 0x4, [0x7f]}) (async) pipe(&(0x7f0000000080)) (async) splice(r3, 0x0, r0, 0x0, 0x500, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r5, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r7, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000005200000428bd00010000000000007e33ad", @ANYRES32=0x0, @ANYBLOB="080006000010000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000600018000000800060003000000080006000300000008000100", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x40014}, 0x20004000) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r9, 0x0, r8, 0x0, 0x500, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x15db7702649aa45}}, './file0\x00'}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) 03:57:57 executing program 1: fstat(0xffffffffffffffff, &(0x7f0000000080)) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) 03:57:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x33fe0) 03:57:57 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) pipe(&(0x7f0000000080)) (async) write(r0, &(0x7f0000000400)="fb", 0x1) (async) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) [ 486.007350][ T3662] Bluetooth: hci5: link tx timeout [ 486.007840][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 486.012925][ T3662] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 486.031158][ T3662] Bluetooth: hci5: link tx timeout [ 486.036333][ T3662] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa 03:57:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xc03e) 03:57:57 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x500, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000400)="fb", 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x500, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e0dfa", @ANYRES32, @ANYRES16=r1, @ANYRES8=r3, @ANYRES16=r5, @ANYBLOB="9227d2b97806c0b1e21497d9e199d34be9db9a08f97bc3d40879954f139f641afd9156191069cea04cbebc01aec3533b82f4ed9a274a4c9113d90ca2adaf8ad024762e79b5bd67925c367d24ba497b238304affbc2db", @ANYRESDEC=r2, @ANYRESOCT=r7], 0x10) 03:57:57 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) pipe(&(0x7f0000000080)) (async) write(r0, &(0x7f0000000400)="fb", 0x1) (async) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) 03:57:57 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x5d}, @hci_ev_le_advertising_info={{}, {0x4, [{0x3, 0x0, @none, 0x16, "3e349bdf9dc3e3beeb6a48eede19de401eff0f1701b8", 0x95}, {0x0, 0x0, @any, 0x10, "bfe8bd1d8146d4ea1ff20777427438e9", 0x6}, {0x4, 0x1, @none, 0x4, "ceab5c0c", 0x5}, {0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, "96029c35ce85d2027e", 0x1}]}}}}, 0x60) 03:57:57 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000400)="fb", 0x1) (async) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000180)={0x8, 0x4, [0x7f]}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r0, 0x0, 0x500, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r5, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r7, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000005200000428bd00010000000000007e33ad", @ANYRES32=0x0, @ANYBLOB="080006000010000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000600018000000800060003000000080006000300000008000100", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x40014}, 0x20004000) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x500, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x15db7702649aa45}}, './file0\x00'}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:57:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x12, r1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "9e94c5a4c433fcb2", "5d17e28dc79978a2c1ba563360e1a5916e4ef0aa7ee4bdb7fa2df563c0067639", "b43a366f", "84d27d09e3a59fb2"}, 0x38) sendto$inet6(r0, &(0x7f00000075c0)='8', 0x7fd6, 0x8000, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) 03:57:57 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x5d}, @hci_ev_le_advertising_info={{}, {0x4, [{0x3, 0x0, @none, 0x16, "3e349bdf9dc3e3beeb6a48eede19de401eff0f1701b8", 0x95}, {0x0, 0x0, @any, 0x10, "bfe8bd1d8146d4ea1ff20777427438e9", 0x6}, {0x4, 0x1, @none, 0x4, "ceab5c0c", 0x5}, {0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, "96029c35ce85d2027e", 0x1}]}}}}, 0x60) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x5d}, @hci_ev_le_advertising_info={{}, {0x4, [{0x3, 0x0, @none, 0x16, "3e349bdf9dc3e3beeb6a48eede19de401eff0f1701b8", 0x95}, {0x0, 0x0, @any, 0x10, "bfe8bd1d8146d4ea1ff20777427438e9", 0x6}, {0x4, 0x1, @none, 0x4, "ceab5c0c", 0x5}, {0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, "96029c35ce85d2027e", 0x1}]}}}}, 0x60) (async) 03:57:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x34000) 03:57:57 executing program 0: ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x7, 0x19a87252, 0x6, 0x0, 0x3], 0x5, 0x48c, 0x4, 0x1, 0x2, 0x7fff, 0x93c2, {0x49eb, 0xd, 0x9, 0x9, 0x1, 0x1dde, 0x81, 0x0, 0x7fff, 0xff01, 0x800, 0x9, 0x3, 0x7fffffff, "73dc549889a1673c8bdb2f167e557857bce66e25c0d953fedc9afccb329f89b0"}}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) 03:57:57 executing program 0: ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x7, 0x19a87252, 0x6, 0x0, 0x3], 0x5, 0x48c, 0x4, 0x1, 0x2, 0x7fff, 0x93c2, {0x49eb, 0xd, 0x9, 0x9, 0x1, 0x1dde, 0x81, 0x0, 0x7fff, 0xff01, 0x800, 0x9, 0x3, 0x7fffffff, "73dc549889a1673c8bdb2f167e557857bce66e25c0d953fedc9afccb329f89b0"}}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x7, 0x19a87252, 0x6, 0x0, 0x3], 0x5, 0x48c, 0x4, 0x1, 0x2, 0x7fff, 0x93c2, {0x49eb, 0xd, 0x9, 0x9, 0x1, 0x1dde, 0x81, 0x0, 0x7fff, 0xff01, 0x800, 0x9, 0x3, 0x7fffffff, "73dc549889a1673c8bdb2f167e557857bce66e25c0d953fedc9afccb329f89b0"}}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) (async) 03:57:57 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x5d}, @hci_ev_le_advertising_info={{}, {0x4, [{0x3, 0x0, @none, 0x16, "3e349bdf9dc3e3beeb6a48eede19de401eff0f1701b8", 0x95}, {0x0, 0x0, @any, 0x10, "bfe8bd1d8146d4ea1ff20777427438e9", 0x6}, {0x4, 0x1, @none, 0x4, "ceab5c0c", 0x5}, {0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, "96029c35ce85d2027e", 0x1}]}}}}, 0x60) 03:57:57 executing program 0: ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x7, 0x19a87252, 0x6, 0x0, 0x3], 0x5, 0x48c, 0x4, 0x1, 0x2, 0x7fff, 0x93c2, {0x49eb, 0xd, 0x9, 0x9, 0x1, 0x1dde, 0x81, 0x0, 0x7fff, 0xff01, 0x800, 0x9, 0x3, 0x7fffffff, "73dc549889a1673c8bdb2f167e557857bce66e25c0d953fedc9afccb329f89b0"}}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) 03:57:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x12, r1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "9e94c5a4c433fcb2", "5d17e28dc79978a2c1ba563360e1a5916e4ef0aa7ee4bdb7fa2df563c0067639", "b43a366f", "84d27d09e3a59fb2"}, 0x38) sendto$inet6(r0, &(0x7f00000075c0)='8', 0x7fd6, 0x8000, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) 03:57:58 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x500, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000400)="fb", 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x500, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e0dfa", @ANYRES32, @ANYRES16=r1, @ANYRES8=r3, @ANYRES16=r5, @ANYBLOB="9227d2b97806c0b1e21497d9e199d34be9db9a08f97bc3d40879954f139f641afd9156191069cea04cbebc01aec3533b82f4ed9a274a4c9113d90ca2adaf8ad024762e79b5bd67925c367d24ba497b238304affbc2db", @ANYRESDEC=r2, @ANYRESOCT=r7], 0x10) 03:57:58 executing program 4: ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0xffffffffffff702b) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4fa) 03:57:58 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="0004fc8f00000000180000007c7529852a4c0c0831fca818dc6acb5a838753a328a42d9efd0821ae30dd79e3ad482c969baebc2d3a44a4b6d1567a19dcc1cf629daed620ce4650253b18e210102eddb85b1e08cf4ad9f510134410944d6db2615009009d23f4a4eb7b623171cfc2b67d3c806b2dd31c80c426", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x301, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x444}, 0x200041c4) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3753c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de069ac20b7af1b342010000f349191a81a4b7c49553f87cffffcc63076592b31d89302481993f5658e32d22ce36ebb6b3a3b817eb46020000004f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832b843e3414a4bf9763ed310f7fba2bc97571463d69ace8e50e9686c1f1aec3718669d79471147ad4becd69cb0ce990c0c3b60a5217054aa659f101cb9e516ab80ca9a4cadff97dd84f7958a9f6eca90ba75d31cdd4e96fccb971e6b40c327e2dd7e58dcb739c5b8814bc7bc13ceecd22e7c7aeaee08120589b346ed1441d731225"], 0xcd) 03:57:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x12, r1, 0x0) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "9e94c5a4c433fcb2", "5d17e28dc79978a2c1ba563360e1a5916e4ef0aa7ee4bdb7fa2df563c0067639", "b43a366f", "84d27d09e3a59fb2"}, 0x38) (async) sendto$inet6(r0, &(0x7f00000075c0)='8', 0x7fd6, 0x8000, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) 03:57:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x40000) 03:57:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x33fe0) 03:57:58 executing program 4: ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0xffffffffffff702b) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4fa) 03:57:58 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="0004fc8f00000000180000007c7529852a4c0c0831fca818dc6acb5a838753a328a42d9efd0821ae30dd79e3ad482c969baebc2d3a44a4b6d1567a19dcc1cf629daed620ce4650253b18e210102eddb85b1e08cf4ad9f510134410944d6db2615009009d23f4a4eb7b623171cfc2b67d3c806b2dd31c80c426", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x301, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x444}, 0x200041c4) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xcd) 03:57:58 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x500, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000400)="fb", 0x1) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x500, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e0dfa", @ANYRES32, @ANYRES16=r1, @ANYRES8=r3, @ANYRES16=r5, @ANYBLOB="9227d2b97806c0b1e21497d9e199d34be9db9a08f97bc3d40879954f139f641afd9156191069cea04cbebc01aec3533b82f4ed9a274a4c9113d90ca2adaf8ad024762e79b5bd67925c367d24ba497b238304affbc2db", @ANYRESDEC=r2, @ANYRESOCT=r7], 0x10) 03:57:58 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="0004fc8f00000000180000007c7529852a4c0c0831fca818dc6acb5a838753a328a42d9efd0821ae30dd79e3ad482c969baebc2d3a44a4b6d1567a19dcc1cf629daed620ce4650253b18e210102eddb85b1e08cf4ad9f510134410944d6db2615009009d23f4a4eb7b623171cfc2b67d3c806b2dd31c80c426", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x301, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x444}, 0x200041c4) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xcd) 03:57:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x12, r1, 0x0) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "9e94c5a4c433fcb2", "5d17e28dc79978a2c1ba563360e1a5916e4ef0aa7ee4bdb7fa2df563c0067639", "b43a366f", "84d27d09e3a59fb2"}, 0x38) (async) sendto$inet6(r0, &(0x7f00000075c0)='8', 0x7fd6, 0x8000, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) 03:57:58 executing program 4: ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0xffffffffffff702b) (async) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4fa) 03:57:58 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x2}}, @l2cap_info_req={{0xa, 0xfd, 0x2}, {0xe8e5}}, @l2cap_disconn_req={{0x6, 0x63, 0x4}, {0x400, 0x5}}]}}, 0x1d) 03:57:58 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b32035c5090407572cbfe200"/32], 0x20) 03:57:58 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) 03:57:58 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83a3f3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) 03:57:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x200000) [ 487.355057][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 487.387901][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x3ec0) 03:57:58 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b32035c5090407572cbfe200"/32], 0x20) 03:57:58 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x2}}, @l2cap_info_req={{0xa, 0xfd, 0x2}, {0xe8e5}}, @l2cap_disconn_req={{0x6, 0x63, 0x4}, {0x400, 0x5}}]}}, 0x1d) 03:57:58 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83a3f3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83a3f3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) (async) 03:57:58 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) [ 487.517519][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 487.555237][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:59 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b32035c5090407572cbfe200"/32], 0x20) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b32035c5090407572cbfe200"/32], 0x20) (async) 03:57:59 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83a3f3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) 03:57:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x2}}, @l2cap_info_req={{0xa, 0xfd, 0x2}, {0xe8e5}}, @l2cap_disconn_req={{0x6, 0x63, 0x4}, {0x400, 0x5}}]}}, 0x1d) 03:57:59 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) [ 487.684506][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 487.697770][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 487.705598][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:59 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xef}, "bd7d337b48e81222da60947b0ec30fd346eba48183e6078c54be93df37ce797926b6b818fa415a1feab11e43f18a1122a54ac14a6c83f54aefceb3ab4d202fc8eadcd5207908633c0ff710852da0501201526bdb826dd3a4805dc81c729bd6c6a8d110fefd36a9218175247c5dca74715cb71b4428c75ffa53b0116b7ce837c84203e4be2ffecfd4b86d6f8fab74946c4036e31ea4f3867c9495682594f15a19b5c552e8c6e240efbe438d7d829c01a33d2d03f5241fb7f34125ef6bab9822615a18cd27ebf86ce2be095fc404c8febb7218dfe3386c3db99cbd721583b562966292bf8e84c5fb62137423c53bdde8"}, 0xf3) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) 03:57:59 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:57:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x400300) 03:57:59 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) 03:57:59 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_conn_rsp={{0x3, 0x80, 0x8}, {0x80, 0x0, 0x200, 0xd93}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x3ff}}]}}, 0x1d) 03:57:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x10) 03:57:59 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:57:59 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xef}, "bd7d337b48e81222da60947b0ec30fd346eba48183e6078c54be93df37ce797926b6b818fa415a1feab11e43f18a1122a54ac14a6c83f54aefceb3ab4d202fc8eadcd5207908633c0ff710852da0501201526bdb826dd3a4805dc81c729bd6c6a8d110fefd36a9218175247c5dca74715cb71b4428c75ffa53b0116b7ce837c84203e4be2ffecfd4b86d6f8fab74946c4036e31ea4f3867c9495682594f15a19b5c552e8c6e240efbe438d7d829c01a33d2d03f5241fb7f34125ef6bab9822615a18cd27ebf86ce2be095fc404c8febb7218dfe3386c3db99cbd721583b562966292bf8e84c5fb62137423c53bdde8"}, 0xf3) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) 03:57:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x1000000) 03:57:59 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:57:59 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_conn_rsp={{0x3, 0x80, 0x8}, {0x80, 0x0, 0x200, 0xd93}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x3ff}}]}}, 0x1d) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_conn_rsp={{0x3, 0x80, 0x8}, {0x80, 0x0, 0x200, 0xd93}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x3ff}}]}}, 0x1d) (async) 03:57:59 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xef}, "bd7d337b48e81222da60947b0ec30fd346eba48183e6078c54be93df37ce797926b6b818fa415a1feab11e43f18a1122a54ac14a6c83f54aefceb3ab4d202fc8eadcd5207908633c0ff710852da0501201526bdb826dd3a4805dc81c729bd6c6a8d110fefd36a9218175247c5dca74715cb71b4428c75ffa53b0116b7ce837c84203e4be2ffecfd4b86d6f8fab74946c4036e31ea4f3867c9495682594f15a19b5c552e8c6e240efbe438d7d829c01a33d2d03f5241fb7f34125ef6bab9822615a18cd27ebf86ce2be095fc404c8febb7218dfe3386c3db99cbd721583b562966292bf8e84c5fb62137423c53bdde8"}, 0xf3) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xef}, "bd7d337b48e81222da60947b0ec30fd346eba48183e6078c54be93df37ce797926b6b818fa415a1feab11e43f18a1122a54ac14a6c83f54aefceb3ab4d202fc8eadcd5207908633c0ff710852da0501201526bdb826dd3a4805dc81c729bd6c6a8d110fefd36a9218175247c5dca74715cb71b4428c75ffa53b0116b7ce837c84203e4be2ffecfd4b86d6f8fab74946c4036e31ea4f3867c9495682594f15a19b5c552e8c6e240efbe438d7d829c01a33d2d03f5241fb7f34125ef6bab9822615a18cd27ebf86ce2be095fc404c8febb7218dfe3386c3db99cbd721583b562966292bf8e84c5fb62137423c53bdde8"}, 0xf3) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) (async) [ 488.021837][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 488.031797][ T3662] Bluetooth: Unexpected continuation frame (len 24) 03:57:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x10) 03:57:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x10) 03:57:59 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043eca0d98110000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dcdde67796b5709d72d7c2c120f8158cfbca9ae71dc5b9659a3bb07bb0800cee6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781fffa94600000000000000de49191a81a4b7c49553f87cffffcc3282138e194c08dd6481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef84865b76a62103207c36832bc97571463d6901325cf13cd56f20506315ca9f32c53b42292baec47d378487af4b2ded13be229ae630cb0323d145887cca3304f0afceec37fd39fc1cca27b0aed0dc24"], 0xcd) [ 488.135910][ T3662] bt_err_ratelimited: 3 callbacks suppressed [ 488.135931][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 488.142115][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d [ 488.180027][ T3662] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 488.180056][ T3662] Bluetooth: hci4: Malformed LE Event: 0x0d [ 488.204490][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 488.212347][ T3662] Bluetooth: Unexpected continuation frame (len 24) [ 488.219276][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:57:59 executing program 5: r0 = syz_clone(0x204000, &(0x7f00000022c0)="fa2363f36a566a5045afd4d5936627aefbf2649fdeb51472575c1481fbbe155f2018f74284ed5ee483b295c5049767be1aebd783264a47919ef161ae8aab9e4fdfd21405b80ee616dc3fe759e0d93d2e6f3832667fa1203a2aa60aee5c11601286c15db1022b2cff67bb46abfa79f900cb8c733b6662444b572551bf95e291b4f10d4f87890206c3f30771c5645446bf5bb365cfa69c4dc3d32a47bf4491c826be08950f9d6564b8cc16362aa862f9e83d00bc", 0xb3, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="06f28ca0f23c5b0ff5a9af7ff1bb97e8689e914b211969fcec8d0df994cbf126e76256c60d29982588e8f270c9a83249ffb1ac1872077b90eed8d9b9bf3a018545f9e19baef14fa38858bb983d9227feee49e2620fc39888090bab") openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x1) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04591a0d010200d4a196ceaaaa12000000002cef00000000aaaaaaaaaa0000"], 0x1d) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200)=r0, 0x12) 03:57:59 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a00, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x1c7, 0x7, 0x0, "be856b0a48aaa05c55a25b1792d9f1ba2e1d19245106e05ea128fff345d57c1e", 0x65700610}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306}, 0x6, {0x2, 0x4e23, @empty}, 'tunl0\x00'}) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8, 0xc9, 0x1}}}, 0x7) [ 488.227114][ T3662] Bluetooth: Unexpected continuation frame (len 24) 03:57:59 executing program 5: r0 = syz_clone(0x204000, &(0x7f00000022c0)="fa2363f36a566a5045afd4d5936627aefbf2649fdeb51472575c1481fbbe155f2018f74284ed5ee483b295c5049767be1aebd783264a47919ef161ae8aab9e4fdfd21405b80ee616dc3fe759e0d93d2e6f3832667fa1203a2aa60aee5c11601286c15db1022b2cff67bb46abfa79f900cb8c733b6662444b572551bf95e291b4f10d4f87890206c3f30771c5645446bf5bb365cfa69c4dc3d32a47bf4491c826be08950f9d6564b8cc16362aa862f9e83d00bc", 0xb3, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="06f28ca0f23c5b0ff5a9af7ff1bb97e8689e914b211969fcec8d0df994cbf126e76256c60d29982588e8f270c9a83249ffb1ac1872077b90eed8d9b9bf3a018545f9e19baef14fa38858bb983d9227feee49e2620fc39888090bab") openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x1) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04591a0d010200d4a196ceaaaa12000000002cef00000000aaaaaaaaaa0000"], 0x1d) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200)=r0, 0x12) 03:57:59 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x2d}, {0x874a, 0x7, [{0xc8, 0xca, 0x7}, {0xc8, 0x81, 0x81}, {0xc9, 0x3, 0xfff7}, {0xc8, 0x1f, 0x1f}, {0xc9, 0x4, 0x6}, {0xc9, 0xfff9, 0x7}, {0xc8, 0x1f, 0x8}]}}}, 0x30) 03:57:59 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_conn_rsp={{0x3, 0x80, 0x8}, {0x80, 0x0, 0x200, 0xd93}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x3ff}}]}}, 0x1d) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_conn_rsp={{0x3, 0x80, 0x8}, {0x80, 0x0, 0x200, 0xd93}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x3ff}}]}}, 0x1d) (async) [ 488.404866][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 488.417375][ T3662] Bluetooth: Unexpected continuation frame (len 24) [ 488.424175][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 488.439823][ T3662] Bluetooth: Unexpected continuation frame (len 24) 03:57:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x4000000) 03:57:59 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x500, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x500, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000400)="fb", 0x1) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES8=r4, @ANYRESDEC, @ANYRES8=r7, @ANYRESOCT=r2, @ANYRESOCT=r3, @ANYRES16=r3, @ANYRES8=r9], 0x10) 03:57:59 executing program 5: r0 = syz_clone(0x204000, &(0x7f00000022c0)="fa2363f36a566a5045afd4d5936627aefbf2649fdeb51472575c1481fbbe155f2018f74284ed5ee483b295c5049767be1aebd783264a47919ef161ae8aab9e4fdfd21405b80ee616dc3fe759e0d93d2e6f3832667fa1203a2aa60aee5c11601286c15db1022b2cff67bb46abfa79f900cb8c733b6662444b572551bf95e291b4f10d4f87890206c3f30771c5645446bf5bb365cfa69c4dc3d32a47bf4491c826be08950f9d6564b8cc16362aa862f9e83d00bc", 0xb3, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="06f28ca0f23c5b0ff5a9af7ff1bb97e8689e914b211969fcec8d0df994cbf126e76256c60d29982588e8f270c9a83249ffb1ac1872077b90eed8d9b9bf3a018545f9e19baef14fa38858bb983d9227feee49e2620fc39888090bab") openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x1) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04591a0d010200d4a196ceaaaa12000000002cef00000000aaaaaaaaaa0000"], 0x1d) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200)=r0, 0x12) 03:57:59 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01eb09000000000000000000000000002100aaaaaaaaaa0000"], 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x3, 0x2}, {0x8000}}}}, 0xf) 03:57:59 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x2d}, {0x874a, 0x7, [{0xc8, 0xca, 0x7}, {0xc8, 0x81, 0x81}, {0xc9, 0x3, 0xfff7}, {0xc8, 0x1f, 0x1f}, {0xc9, 0x4, 0x6}, {0xc9, 0xfff9, 0x7}, {0xc8, 0x1f, 0x8}]}}}, 0x30) 03:57:59 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 1.', "0299cd", "dc7f62", 0xfc, 0x0, 0x0, 0x0, 0x2}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xac, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x9, 0x2}, {0x8}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:57:59 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x2d}, {0x874a, 0x7, [{0xc8, 0xca, 0x7}, {0xc8, 0x81, 0x81}, {0xc9, 0x3, 0xfff7}, {0xc8, 0x1f, 0x1f}, {0xc9, 0x4, 0x6}, {0xc9, 0xfff9, 0x7}, {0xc8, 0x1f, 0x8}]}}}, 0x30) [ 488.526013][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 488.534998][ T3662] Bluetooth: hci5: ACL packet for unknown connection handle 172 03:58:00 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01eb09000000000000000000000000002100aaaaaaaaaa0000"], 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x3, 0x2}, {0x8000}}}}, 0xf) 03:58:00 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 1.', "0299cd", "dc7f62", 0xfc, 0x0, 0x0, 0x0, 0x2}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xac, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x9, 0x2}, {0x8}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:58:00 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xe7}, "9db9a3a5fcaf93d5c21d8c1ca216cb86c8b9545603ef22fe37d382a6c9860ed09deb40c8ece323645edbddbae37d4204b20675e9e5b3f12340c2dde2158c506bc4c7b82491ac6bc984e4069d91602d1b3819192b097aaf520d567e12c87d381232baf671f060419468c87510f6490aa708c61d4eb29e46f04cd77a1394e056dec9932a8eba7db2bac56371cb7cf7ba914ed98881f291e018f177dcc61d413e0d0511f04f2a630d8815e18864d786e4c8c1dea59e0109e536bdadd03a1d8142dac440847da0c8cc53dffad7fe91783d0591f777972666ad424d69af64c1958101d2e6606882b0fd"}}, 0xea) 03:58:00 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 1.', "0299cd", "dc7f62", 0xfc, 0x0, 0x0, 0x0, 0x2}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xac, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x9, 0x2}, {0x8}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 1.', "0299cd", "dc7f62", 0xfc, 0x0, 0x0, 0x0, 0x2}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xac, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x9, 0x2}, {0x8}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) [ 488.620653][ T3662] Bluetooth: hci5: ACL packet for unknown connection handle 172 [ 488.629853][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:00 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaad793ae8f"], 0x1d) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x105}, @l2cap_cid_signaling={{0x101}, [@l2cap_conf_rsp={{0x5, 0x1, 0x21}, {0x1, 0x4, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x300}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x40, 0x2, 0x81, 0x1, 0xf952}}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}, @l2cap_create_chan_req={{0xc, 0x1f, 0x5}, {0x0, 0x25e, 0x80}}, @l2cap_info_rsp={{0xb, 0x7, 0x79}, {0x401, 0x538, "d3967a6aeb6adb37bb86a01100df1c81bf8263e1b6ec4b0876a300cae8a1995b6d1c58d738f8bad6136724699af99287f990e8e373f9c1b73120d9c7195736a6eee670132026428430e1a5a897043262370cd46f301bff8e7c1df2a23521101c25853427a68c9cc02e810afcf52ce0810bef3dd612"}}, @l2cap_move_chan_cfm={{0x10, 0x7f, 0x4}, {0x1ff, 0xc2da}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x2, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x4}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x2, 0x3f}}, @l2cap_conf_rsp={{0x5, 0x1, 0x2e}, {0xfffe, 0x101, 0x6, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8, 0x1, 0x1, 0x90, 0xb83}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x8001}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0x6b9f}]}}]}}, 0x10a) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000007b9540794933713c2e92fe49581ec810fcb94569866f791fccf4aa99bc8729a49e962201ab6e4e656b3cd09f1a16c7e6cb06461e99c82a6b6e22f62ed869ac65fff0bc943db29d2a8abeb5e17bcf6af3c944404e10ec9f9879523599b9d0bfe9dd725a95a5b7e950152c34a906c042a0a07289980642301739e7fcd542"], 0x6) [ 488.664324][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 488.712559][ T3662] Bluetooth: hci5: ACL packet for unknown connection handle 172 [ 488.723266][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 488.731084][ T3662] Bluetooth: hci5: ACL packet for unknown connection handle 172 03:58:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x7000000) 03:58:00 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x200) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x500, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x500, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000400)="fb", 0x1) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES8=r4, @ANYRESDEC, @ANYRES8=r7, @ANYRESOCT=r2, @ANYRESOCT=r3, @ANYRES16=r3, @ANYRES8=r9], 0x10) 03:58:00 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01eb09000000000000000000000000002100aaaaaaaaaa0000"], 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x3, 0x2}, {0x8000}}}}, 0xf) 03:58:00 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaad793ae8f"], 0x1d) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x105}, @l2cap_cid_signaling={{0x101}, [@l2cap_conf_rsp={{0x5, 0x1, 0x21}, {0x1, 0x4, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x300}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x40, 0x2, 0x81, 0x1, 0xf952}}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}, @l2cap_create_chan_req={{0xc, 0x1f, 0x5}, {0x0, 0x25e, 0x80}}, @l2cap_info_rsp={{0xb, 0x7, 0x79}, {0x401, 0x538, "d3967a6aeb6adb37bb86a01100df1c81bf8263e1b6ec4b0876a300cae8a1995b6d1c58d738f8bad6136724699af99287f990e8e373f9c1b73120d9c7195736a6eee670132026428430e1a5a897043262370cd46f301bff8e7c1df2a23521101c25853427a68c9cc02e810afcf52ce0810bef3dd612"}}, @l2cap_move_chan_cfm={{0x10, 0x7f, 0x4}, {0x1ff, 0xc2da}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x2, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x4}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x2, 0x3f}}, @l2cap_conf_rsp={{0x5, 0x1, 0x2e}, {0xfffe, 0x101, 0x6, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8, 0x1, 0x1, 0x90, 0xb83}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x8001}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0x6b9f}]}}]}}, 0x10a) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000007b9540794933713c2e92fe49581ec810fcb94569866f791fccf4aa99bc8729a49e962201ab6e4e656b3cd09f1a16c7e6cb06461e99c82a6b6e22f62ed869ac65fff0bc943db29d2a8abeb5e17bcf6af3c944404e10ec9f9879523599b9d0bfe9dd725a95a5b7e950152c34a906c042a0a07289980642301739e7fcd542"], 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaad793ae8f"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x105}, @l2cap_cid_signaling={{0x101}, [@l2cap_conf_rsp={{0x5, 0x1, 0x21}, {0x1, 0x4, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x300}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x40, 0x2, 0x81, 0x1, 0xf952}}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}, @l2cap_create_chan_req={{0xc, 0x1f, 0x5}, {0x0, 0x25e, 0x80}}, @l2cap_info_rsp={{0xb, 0x7, 0x79}, {0x401, 0x538, "d3967a6aeb6adb37bb86a01100df1c81bf8263e1b6ec4b0876a300cae8a1995b6d1c58d738f8bad6136724699af99287f990e8e373f9c1b73120d9c7195736a6eee670132026428430e1a5a897043262370cd46f301bff8e7c1df2a23521101c25853427a68c9cc02e810afcf52ce0810bef3dd612"}}, @l2cap_move_chan_cfm={{0x10, 0x7f, 0x4}, {0x1ff, 0xc2da}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x2, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x4}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x2, 0x3f}}, @l2cap_conf_rsp={{0x5, 0x1, 0x2e}, {0xfffe, 0x101, 0x6, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8, 0x1, 0x1, 0x90, 0xb83}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x8001}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0x6b9f}]}}]}}, 0x10a) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000007b9540794933713c2e92fe49581ec810fcb94569866f791fccf4aa99bc8729a49e962201ab6e4e656b3cd09f1a16c7e6cb06461e99c82a6b6e22f62ed869ac65fff0bc943db29d2a8abeb5e17bcf6af3c944404e10ec9f9879523599b9d0bfe9dd725a95a5b7e950152c34a906c042a0a07289980642301739e7fcd542"], 0x6) (async) 03:58:00 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xe7}, "9db9a3a5fcaf93d5c21d8c1ca216cb86c8b9545603ef22fe37d382a6c9860ed09deb40c8ece323645edbddbae37d4204b20675e9e5b3f12340c2dde2158c506bc4c7b82491ac6bc984e4069d91602d1b3819192b097aaf520d567e12c87d381232baf671f060419468c87510f6490aa708c61d4eb29e46f04cd77a1394e056dec9932a8eba7db2bac56371cb7cf7ba914ed98881f291e018f177dcc61d413e0d0511f04f2a630d8815e18864d786e4c8c1dea59e0109e536bdadd03a1d8142dac440847da0c8cc53dffad7fe91783d0591f777972666ad424d69af64c1958101d2e6606882b0fd"}}, 0xea) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xe7}, "9db9a3a5fcaf93d5c21d8c1ca216cb86c8b9545603ef22fe37d382a6c9860ed09deb40c8ece323645edbddbae37d4204b20675e9e5b3f12340c2dde2158c506bc4c7b82491ac6bc984e4069d91602d1b3819192b097aaf520d567e12c87d381232baf671f060419468c87510f6490aa708c61d4eb29e46f04cd77a1394e056dec9932a8eba7db2bac56371cb7cf7ba914ed98881f291e018f177dcc61d413e0d0511f04f2a630d8815e18864d786e4c8c1dea59e0109e536bdadd03a1d8142dac440847da0c8cc53dffad7fe91783d0591f777972666ad424d69af64c1958101d2e6606882b0fd"}}, 0xea) (async) 03:58:00 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0x20) 03:58:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x10000000) 03:58:00 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a602a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993fb3a30800eb4692c72ea54f24d33ac83abf39050142120100d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d9600000000000000000000004f08fbd4300d851721c941554d7a190bd1178e1ac1a3464200144fa05512884f814d3765bb3ec6681a9dfec61a44147a2d094d3a420160b4cc00fb873f2dd8a417208b3187e58d0a55953222b5c0ac19749ddad5e7013cfa15b9212643c786d39bda5a97639286e547f58f1dc3f9f65545a02353e7ef665e44895a6e7084f44d778b0841e82ceb852fd4264b3d7a8ffd7dde622d0f5adb8dee6a623037e08bd11303e8f541fc34ed9f72c762cf08e5139f105fa9786b4179cb451182ee4148d3d81e83cc0f60f57fa9c0106219ac86458bcf"], 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xe7}, "9db9a3a5fcaf93d5c21d8c1ca216cb86c8b9545603ef22fe37d382a6c9860ed09deb40c8ece323645edbddbae37d4204b20675e9e5b3f12340c2dde2158c506bc4c7b82491ac6bc984e4069d91602d1b3819192b097aaf520d567e12c87d381232baf671f060419468c87510f6490aa708c61d4eb29e46f04cd77a1394e056dec9932a8eba7db2bac56371cb7cf7ba914ed98881f291e018f177dcc61d413e0d0511f04f2a630d8815e18864d786e4c8c1dea59e0109e536bdadd03a1d8142dac440847da0c8cc53dffad7fe91783d0591f777972666ad424d69af64c1958101d2e6606882b0fd"}}, 0xea) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xe7}, "9db9a3a5fcaf93d5c21d8c1ca216cb86c8b9545603ef22fe37d382a6c9860ed09deb40c8ece323645edbddbae37d4204b20675e9e5b3f12340c2dde2158c506bc4c7b82491ac6bc984e4069d91602d1b3819192b097aaf520d567e12c87d381232baf671f060419468c87510f6490aa708c61d4eb29e46f04cd77a1394e056dec9932a8eba7db2bac56371cb7cf7ba914ed98881f291e018f177dcc61d413e0d0511f04f2a630d8815e18864d786e4c8c1dea59e0109e536bdadd03a1d8142dac440847da0c8cc53dffad7fe91783d0591f777972666ad424d69af64c1958101d2e6606882b0fd"}}, 0xea) (async) 03:58:00 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaad793ae8f"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x105}, @l2cap_cid_signaling={{0x101}, [@l2cap_conf_rsp={{0x5, 0x1, 0x21}, {0x1, 0x4, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x300}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x40, 0x2, 0x81, 0x1, 0xf952}}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}, @l2cap_create_chan_req={{0xc, 0x1f, 0x5}, {0x0, 0x25e, 0x80}}, @l2cap_info_rsp={{0xb, 0x7, 0x79}, {0x401, 0x538, "d3967a6aeb6adb37bb86a01100df1c81bf8263e1b6ec4b0876a300cae8a1995b6d1c58d738f8bad6136724699af99287f990e8e373f9c1b73120d9c7195736a6eee670132026428430e1a5a897043262370cd46f301bff8e7c1df2a23521101c25853427a68c9cc02e810afcf52ce0810bef3dd612"}}, @l2cap_move_chan_cfm={{0x10, 0x7f, 0x4}, {0x1ff, 0xc2da}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x2, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x4}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x2, 0x3f}}, @l2cap_conf_rsp={{0x5, 0x1, 0x2e}, {0xfffe, 0x101, 0x6, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8, 0x1, 0x1, 0x90, 0xb83}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x8001}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0x6b9f}]}}]}}, 0x10a) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000007b9540794933713c2e92fe49581ec810fcb94569866f791fccf4aa99bc8729a49e962201ab6e4e656b3cd09f1a16c7e6cb06461e99c82a6b6e22f62ed869ac65fff0bc943db29d2a8abeb5e17bcf6af3c944404e10ec9f9879523599b9d0bfe9dd725a95a5b7e950152c34a906c042a0a07289980642301739e7fcd542"], 0x6) 03:58:00 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0x20) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0x20) (async) [ 489.370346][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:00 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0x20) [ 489.438056][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 489.447100][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:00 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01eb09000000000000000000000000002100aaaaaaaaaa0000"], 0x1d) 03:58:00 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)=""/210, 0xd2}, {&(0x7f0000000240)=""/120, 0x78}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/92, 0x5c}, {&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000480)=""/159, 0x9f}], 0x6, 0x8, 0x7fffffff) creat(&(0x7f0000000100)='./file0\x00', 0x121) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c990840080000100f26f860ffb041047c50001000400050432000080040092fe07020600020201000610ff01ff54c61ffb000104000009000008061010010300220000000700000008000000072004100ca9010404070f000400700c020207000501010102040005522300050000008000050110e442095d0004090006ff0200040007000702800004090300800900fcff0200e5d58f5daaaa8dc38aa8d7fff17d24c22a0eff98fbe0c6afa8a6b1f53274aa4fd5216c7a85c91127057a009bb20d9016690af6fd72b4ef272bd90004957dc14865d9ee3a089633137512"], 0x89) [ 489.494203][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:01 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x200) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x500, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x500, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000400)="fb", 0x1) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES8=r4, @ANYRESDEC, @ANYRES8=r7, @ANYRESOCT=r2, @ANYRESOCT=r3, @ANYRES16=r3, @ANYRES8=r9], 0x10) 03:58:01 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="a26bc73de7822638768a7b4ccd27f4cce68aa19cab801bdbbcdfa016219f9df84faed849f847474499839b3e21e54e4cd14554a23ea77f4700224a79b66d9eca619b644d1bba83383dfaa6111dd015955298bd5e19b05d3eb1bccbc9192490df8de26a940e0bc1a30f222af4b0d392b7680e3e"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:58:01 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaaaaaa000006101fadc8e3936740ed749d7307d72fb9b26e78baa4b5b6cbb73d5e15efc9a3c22c8df9ed6059638585888ded042b08925ea96cb6b0d06ef15efdf635c20d4a87134bf5aad61d22d3e051a04d1ec443f0913b16b407f581760b863782d7fde46e2b0b5e7ffdfb2e"], 0x1d) 03:58:01 executing program 2: 03:58:01 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)=""/210, 0xd2}, {&(0x7f0000000240)=""/120, 0x78}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/92, 0x5c}, {&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000480)=""/159, 0x9f}], 0x6, 0x8, 0x7fffffff) creat(&(0x7f0000000100)='./file0\x00', 0x121) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c990840080000100f26f860ffb041047c50001000400050432000080040092fe07020600020201000610ff01ff54c61ffb000104000009000008061010010300220000000700000008000000072004100ca9010404070f000400700c020207000501010102040005522300050000008000050110e442095d0004090006ff0200040007000702800004090300800900fcff0200e5d58f5daaaa8dc38aa8d7fff17d24c22a0eff98fbe0c6afa8a6b1f53274aa4fd5216c7a85c91127057a009bb20d9016690af6fd72b4ef272bd90004957dc14865d9ee3a089633137512"], 0x89) 03:58:01 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x11000000) 03:58:01 executing program 2: 03:58:01 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="a26bc73de7822638768a7b4ccd27f4cce68aa19cab801bdbbcdfa016219f9df84faed849f847474499839b3e21e54e4cd14554a23ea77f4700224a79b66d9eca619b644d1bba83383dfaa6111dd015955298bd5e19b05d3eb1bccbc9192490df8de26a940e0bc1a30f222af4b0d392b7680e3e"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:58:01 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaaaaaa000006101fadc8e3936740ed749d7307d72fb9b26e78baa4b5b6cbb73d5e15efc9a3c22c8df9ed6059638585888ded042b08925ea96cb6b0d06ef15efdf635c20d4a87134bf5aad61d22d3e051a04d1ec443f0913b16b407f581760b863782d7fde46e2b0b5e7ffdfb2e"], 0x1d) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaaaaaa000006101fadc8e3936740ed749d7307d72fb9b26e78baa4b5b6cbb73d5e15efc9a3c22c8df9ed6059638585888ded042b08925ea96cb6b0d06ef15efdf635c20d4a87134bf5aad61d22d3e051a04d1ec443f0913b16b407f581760b863782d7fde46e2b0b5e7ffdfb2e"], 0x1d) (async) 03:58:01 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x3f, 0xc8}}}, 0x5) 03:58:01 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)=""/210, 0xd2}, {&(0x7f0000000240)=""/120, 0x78}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/92, 0x5c}, {&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000480)=""/159, 0x9f}], 0x6, 0x8, 0x7fffffff) (async) creat(&(0x7f0000000100)='./file0\x00', 0x121) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c990840080000100f26f860ffb041047c50001000400050432000080040092fe07020600020201000610ff01ff54c61ffb000104000009000008061010010300220000000700000008000000072004100ca9010404070f000400700c020207000501010102040005522300050000008000050110e442095d0004090006ff0200040007000702800004090300800900fcff0200e5d58f5daaaa8dc38aa8d7fff17d24c22a0eff98fbe0c6afa8a6b1f53274aa4fd5216c7a85c91127057a009bb20d9016690af6fd72b4ef272bd90004957dc14865d9ee3a089633137512"], 0x89) 03:58:01 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="a26bc73de7822638768a7b4ccd27f4cce68aa19cab801bdbbcdfa016219f9df84faed849f847474499839b3e21e54e4cd14554a23ea77f4700224a79b66d9eca619b644d1bba83383dfaa6111dd015955298bd5e19b05d3eb1bccbc9192490df8de26a940e0bc1a30f222af4b0d392b7680e3e"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:58:01 executing program 2: 03:58:01 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaaaaaa000006101fadc8e3936740ed749d7307d72fb9b26e78baa4b5b6cbb73d5e15efc9a3c22c8df9ed6059638585888ded042b08925ea96cb6b0d06ef15efdf635c20d4a87134bf5aad61d22d3e051a04d1ec443f0913b16b407f581760b863782d7fde46e2b0b5e7ffdfb2e"], 0x1d) [ 489.876489][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:01 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043efc0c01020000ffffffffffff0000000100000000aaaaaaaaaa0000"], 0x1d) 03:58:01 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043efc0c01020000ffffffffffff0000000100000000aaaaaaaaaa0000"], 0x1d) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043efc0c01020000ffffffffffff0000000100000000aaaaaaaaaa0000"], 0x1d) (async) 03:58:01 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x3f, 0xc8}}}, 0x5) 03:58:01 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x1f000000) 03:58:01 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x3f, 0xc8}}}, 0x5) 03:58:01 executing program 2: syz_emit_vhci(0x0, 0x1d) 03:58:01 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="03c80094204c0d5846b11778311dff2c35fc5ee882d8360381dc837a892b062cd41cde126fcfb22ec015cfb4b06a61f8e54d193deaa17f639d9ad5a87b30311e21ace174427e1fbfb966e76c1e46c079d10d66ad4ca96c9788472fe66f670de98a4d0d7435795bdc55e10b6bee33d1cb7952f9c22004f14d910600000004340e4c372ba3986e978c6204416ad678ef7878fa020c8f4a95e29232a7a09b1e95e54f1c8f717de5f35cc1c865e855f4490bcec157eb9056c14a9c4a7f844eccbc1a396c67b2"], 0x98) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x69}, "9b83a5cf70bd444fa4baef536484478c801ff607b1a234d7d4f6892579ed7cc4b3c706c40d0fdde52705c6587f2ea2804e5c63053bd33fc32dc8d888b020cc3866d5003221b33d389b3a4fa985c02e07d1a9154f5dc82ce8a51dd4e8bfd70143e3443101830dfe53a9"}, 0x6d) [ 490.002206][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:01 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043efc0c01020000ffffffffffff0000000100000000aaaaaaaaaa0000"], 0x1d) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043efc0c01020000ffffffffffff0000000100000000aaaaaaaaaa0000"], 0x1d) (async) 03:58:01 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b1", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) [ 490.083708][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:01 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4a, 0xc8}}}, 0x5) [ 490.124969][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:01 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="03c80094204c0d5846b11778311dff2c35fc5ee882d8360381dc837a892b062cd41cde126fcfb22ec015cfb4b06a61f8e54d193deaa17f639d9ad5a87b30311e21ace174427e1fbfb966e76c1e46c079d10d66ad4ca96c9788472fe66f670de98a4d0d7435795bdc55e10b6bee33d1cb7952f9c22004f14d910600000004340e4c372ba3986e978c6204416ad678ef7878fa020c8f4a95e29232a7a09b1e95e54f1c8f717de5f35cc1c865e855f4490bcec157eb9056c14a9c4a7f844eccbc1a396c67b2"], 0x98) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x69}, "9b83a5cf70bd444fa4baef536484478c801ff607b1a234d7d4f6892579ed7cc4b3c706c40d0fdde52705c6587f2ea2804e5c63053bd33fc32dc8d888b020cc3866d5003221b33d389b3a4fa985c02e07d1a9154f5dc82ce8a51dd4e8bfd70143e3443101830dfe53a9"}, 0x6d) 03:58:01 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="03c80094204c0d5846b11778311dff2c35fc5ee882d8360381dc837a892b062cd41cde126fcfb22ec015cfb4b06a61f8e54d193deaa17f639d9ad5a87b30311e21ace174427e1fbfb966e76c1e46c079d10d66ad4ca96c9788472fe66f670de98a4d0d7435795bdc55e10b6bee33d1cb7952f9c22004f14d910600000004340e4c372ba3986e978c6204416ad678ef7878fa020c8f4a95e29232a7a09b1e95e54f1c8f717de5f35cc1c865e855f4490bcec157eb9056c14a9c4a7f844eccbc1a396c67b2"], 0x98) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x69}, "9b83a5cf70bd444fa4baef536484478c801ff607b1a234d7d4f6892579ed7cc4b3c706c40d0fdde52705c6587f2ea2804e5c63053bd33fc32dc8d888b020cc3866d5003221b33d389b3a4fa985c02e07d1a9154f5dc82ce8a51dd4e8bfd70143e3443101830dfe53a9"}, 0x6d) 03:58:01 executing program 2: syz_emit_vhci(0x0, 0x1d) 03:58:01 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:58:01 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b1", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) [ 490.225454][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 490.355168][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:01 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x3f000000) 03:58:01 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d8930648101000000e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf186ee57290deb2236"], 0xcd) 03:58:01 executing program 2: syz_emit_vhci(0x0, 0x1d) 03:58:01 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4a, 0xc8}}}, 0x5) 03:58:01 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 03:58:01 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b1", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) 03:58:01 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 03:58:01 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x500, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x20) 03:58:01 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4a, 0xc8}}}, 0x5) 03:58:01 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d8930648101000000e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf186ee57290deb2236"], 0xcd) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d8930648101000000e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf186ee57290deb2236"], 0xcd) (async) [ 490.470817][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 490.500541][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:01 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x1d) 03:58:02 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x1d) [ 490.655254][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x803e0000) 03:58:02 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x92, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}}}}, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:58:02 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d8930648101000000e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf186ee57290deb2236"], 0xcd) 03:58:02 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x1d) 03:58:02 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x2, 0x3, 0x40, 0x7, 0xfe, 0x49, 0x1, 0x3f, 0xe4, 0xd8, 0x7, 0x1f, 0x3f}, 0xe) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x10) 03:58:02 executing program 0: r0 = msgget$private(0x0, 0x1a1) r1 = msgget$private(0x0, 0x42f) msgsnd(r0, &(0x7f0000000000)={0x2, "1284c3d899078f34fb0ae10843c5d8b1b0516c556a4a198fa474a394456f4b6e7eda5c4db10192680d3eb8b2e9b847d9054fb2d9d312827d9077e04ce209c8c6ddd4214dae0d5dbefc5dcadf27582585219572458087f99ac1836e3ae897e0f3a7fecfbae82dc273d82a62207d44e900b56da1da846fcb8065ef8002933bf9c9b7a4b3c67c945da919efdb5c773fe0e721cc90600705c006910da23509e518e2817970c93709efd87b09d6242defe3f91dfb9d0693fdf1a3afa3547d907ad7dffc667531694975828e38971c743bccab21370643c4d849ef8e7f6e3d21760466c368f6d76515ac4e663b5e914d9a8928280f8762"}, 0xfc, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000400)="fb", 0x1) msgrcv(r1, &(0x7f00000014c0)=ANY=[@ANYRESDEC=r2], 0xb0, 0x0, 0x2000) r3 = msgget$private(0x0, 0x93) msgrcv(r3, &(0x7f0000001580)={0x0, ""/4096}, 0x1004, 0x3, 0x1000) msgsnd(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="03000000000000009a71ba2230ffb5844172fe4588079aaa1249ad91d3a44dc10f9f3d31fa6d98fd0d33f91ea405602ba3f463155a340d4d3484dd8625c3b440457244dd07577d3c41ea46f8c628e6b72ce735d63e8b8f8d7b690b26bc983c8b63fb1d9bb9733ee1e8b027bdc0b36b4739be73be73dfa30a8e0d5d0abc172fe2b4"], 0x81, 0x0) msgsnd(r3, &(0x7f00000025c0)={0x1, "882be1ceb94a262cbddba8bcb68947fa7de92a1c7c49d3e03e5d7860fa5ecaaa2b"}, 0x25, 0x800) msgsnd(r3, &(0x7f00000002c0)={0x2, "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"}, 0x1008, 0x0) r4 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000002600)=""/193) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x16e) r5 = msgget$private(0x0, 0x200) msgrcv(r5, &(0x7f00000001c0)={0x0, ""/143}, 0x93, 0x0, 0x0) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000001300)=""/225) 03:58:02 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1d) 03:58:02 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x92, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}}}}, 0x14) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:58:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xc0000000) 03:58:02 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) (async, rerun: 32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x500, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x20) (rerun: 32) 03:58:02 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x2, 0x3, 0x40, 0x7, 0xfe, 0x49, 0x1, 0x3f, 0xe4, 0xd8, 0x7, 0x1f, 0x3f}, 0xe) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x10) (rerun: 32) 03:58:02 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1d) 03:58:02 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x92, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}}}}, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:58:02 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1d) 03:58:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xc03e0000) 03:58:02 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x2, 0x3, 0x40, 0x7, 0xfe, 0x49, 0x1, 0x3f, 0xe4, 0xd8, 0x7, 0x1f, 0x3f}, 0xe) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (async) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x2, 0x3, 0x40, 0x7, 0xfe, 0x49, 0x1, 0x3f, 0xe4, 0xd8, 0x7, 0x1f, 0x3f}, 0xe) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x10) (async) 03:58:02 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) (async, rerun: 32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x500, 0x0) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x20) 03:58:03 executing program 0: r0 = msgget$private(0x0, 0x1a1) r1 = msgget$private(0x0, 0x42f) (async) msgsnd(r0, &(0x7f0000000000)={0x2, "1284c3d899078f34fb0ae10843c5d8b1b0516c556a4a198fa474a394456f4b6e7eda5c4db10192680d3eb8b2e9b847d9054fb2d9d312827d9077e04ce209c8c6ddd4214dae0d5dbefc5dcadf27582585219572458087f99ac1836e3ae897e0f3a7fecfbae82dc273d82a62207d44e900b56da1da846fcb8065ef8002933bf9c9b7a4b3c67c945da919efdb5c773fe0e721cc90600705c006910da23509e518e2817970c93709efd87b09d6242defe3f91dfb9d0693fdf1a3afa3547d907ad7dffc667531694975828e38971c743bccab21370643c4d849ef8e7f6e3d21760466c368f6d76515ac4e663b5e914d9a8928280f8762"}, 0xfc, 0x800) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write(r2, &(0x7f0000000400)="fb", 0x1) (async, rerun: 64) msgrcv(r1, &(0x7f00000014c0)=ANY=[@ANYRESDEC=r2], 0xb0, 0x0, 0x2000) (async, rerun: 64) r3 = msgget$private(0x0, 0x93) msgrcv(r3, &(0x7f0000001580)={0x0, ""/4096}, 0x1004, 0x3, 0x1000) msgsnd(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="03000000000000009a71ba2230ffb5844172fe4588079aaa1249ad91d3a44dc10f9f3d31fa6d98fd0d33f91ea405602ba3f463155a340d4d3484dd8625c3b440457244dd07577d3c41ea46f8c628e6b72ce735d63e8b8f8d7b690b26bc983c8b63fb1d9bb9733ee1e8b027bdc0b36b4739be73be73dfa30a8e0d5d0abc172fe2b4"], 0x81, 0x0) (async, rerun: 32) msgsnd(r3, &(0x7f00000025c0)={0x1, "882be1ceb94a262cbddba8bcb68947fa7de92a1c7c49d3e03e5d7860fa5ecaaa2b"}, 0x25, 0x800) (async, rerun: 32) msgsnd(r3, &(0x7f00000002c0)={0x2, "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"}, 0x1008, 0x0) r4 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000002600)=""/193) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x16e) r5 = msgget$private(0x0, 0x200) msgrcv(r5, &(0x7f00000001c0)={0x0, ""/143}, 0x93, 0x0, 0x0) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000001300)=""/225) 03:58:03 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01eb090000000000000000"], 0x1d) 03:58:03 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x200) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES64=r3, @ANYRESDEC=r4], 0x2) 03:58:03 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x8}}, 0x4) 03:58:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xe03f0300) 03:58:03 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:58:03 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04"], 0x1d) 03:58:03 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x8}}, 0x4) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x8}}, 0x4) (async) 03:58:03 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:58:03 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04"], 0x1d) [ 490.716085][ T3662] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 491.743737][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 491.766249][ T3662] Bluetooth: hci4: Received unexpected HCI Event 0x00 03:58:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xeffdffff) 03:58:03 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x8}}, 0x4) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x8}}, 0x4) (async) [ 491.862126][ T3662] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 491.885551][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:03 executing program 0: r0 = msgget$private(0x0, 0x1a1) r1 = msgget$private(0x0, 0x42f) msgsnd(r0, &(0x7f0000000000)={0x2, "1284c3d899078f34fb0ae10843c5d8b1b0516c556a4a198fa474a394456f4b6e7eda5c4db10192680d3eb8b2e9b847d9054fb2d9d312827d9077e04ce209c8c6ddd4214dae0d5dbefc5dcadf27582585219572458087f99ac1836e3ae897e0f3a7fecfbae82dc273d82a62207d44e900b56da1da846fcb8065ef8002933bf9c9b7a4b3c67c945da919efdb5c773fe0e721cc90600705c006910da23509e518e2817970c93709efd87b09d6242defe3f91dfb9d0693fdf1a3afa3547d907ad7dffc667531694975828e38971c743bccab21370643c4d849ef8e7f6e3d21760466c368f6d76515ac4e663b5e914d9a8928280f8762"}, 0xfc, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000400)="fb", 0x1) msgrcv(r1, &(0x7f00000014c0)=ANY=[@ANYRESDEC=r2], 0xb0, 0x0, 0x2000) r3 = msgget$private(0x0, 0x93) msgrcv(r3, &(0x7f0000001580)={0x0, ""/4096}, 0x1004, 0x3, 0x1000) msgsnd(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="03000000000000009a71ba2230ffb5844172fe4588079aaa1249ad91d3a44dc10f9f3d31fa6d98fd0d33f91ea405602ba3f463155a340d4d3484dd8625c3b440457244dd07577d3c41ea46f8c628e6b72ce735d63e8b8f8d7b690b26bc983c8b63fb1d9bb9733ee1e8b027bdc0b36b4739be73be73dfa30a8e0d5d0abc172fe2b4"], 0x81, 0x0) msgsnd(r3, &(0x7f00000025c0)={0x1, "882be1ceb94a262cbddba8bcb68947fa7de92a1c7c49d3e03e5d7860fa5ecaaa2b"}, 0x25, 0x800) msgsnd(r3, &(0x7f00000002c0)={0x2, "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"}, 0x1008, 0x0) r4 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000002600)=""/193) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x16e) r5 = msgget$private(0x0, 0x200) msgrcv(r5, &(0x7f00000001c0)={0x0, ""/143}, 0x93, 0x0, 0x0) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000001300)=""/225) msgget$private(0x0, 0x1a1) (async) msgget$private(0x0, 0x42f) (async) msgsnd(r0, &(0x7f0000000000)={0x2, "1284c3d899078f34fb0ae10843c5d8b1b0516c556a4a198fa474a394456f4b6e7eda5c4db10192680d3eb8b2e9b847d9054fb2d9d312827d9077e04ce209c8c6ddd4214dae0d5dbefc5dcadf27582585219572458087f99ac1836e3ae897e0f3a7fecfbae82dc273d82a62207d44e900b56da1da846fcb8065ef8002933bf9c9b7a4b3c67c945da919efdb5c773fe0e721cc90600705c006910da23509e518e2817970c93709efd87b09d6242defe3f91dfb9d0693fdf1a3afa3547d907ad7dffc667531694975828e38971c743bccab21370643c4d849ef8e7f6e3d21760466c368f6d76515ac4e663b5e914d9a8928280f8762"}, 0xfc, 0x800) (async) pipe(&(0x7f0000000080)) (async) write(r2, &(0x7f0000000400)="fb", 0x1) (async) msgrcv(r1, &(0x7f00000014c0)=ANY=[@ANYRESDEC=r2], 0xb0, 0x0, 0x2000) (async) msgget$private(0x0, 0x93) (async) msgrcv(r3, &(0x7f0000001580)={0x0, ""/4096}, 0x1004, 0x3, 0x1000) (async) msgsnd(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="03000000000000009a71ba2230ffb5844172fe4588079aaa1249ad91d3a44dc10f9f3d31fa6d98fd0d33f91ea405602ba3f463155a340d4d3484dd8625c3b440457244dd07577d3c41ea46f8c628e6b72ce735d63e8b8f8d7b690b26bc983c8b63fb1d9bb9733ee1e8b027bdc0b36b4739be73be73dfa30a8e0d5d0abc172fe2b4"], 0x81, 0x0) (async) msgsnd(r3, &(0x7f00000025c0)={0x1, "882be1ceb94a262cbddba8bcb68947fa7de92a1c7c49d3e03e5d7860fa5ecaaa2b"}, 0x25, 0x800) (async) msgsnd(r3, &(0x7f00000002c0)={0x2, "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"}, 0x1008, 0x0) (async) msgget$private(0x0, 0x1) (async) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000002600)=""/193) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e6b0d02000000ffffffffffff1000000000020000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96080001000000000000050506068000fe08ffffffff6fd2e61ef71ff63249731e866274deb9807d7eee3c88780e8f06ea7c8078102d0dfdd14714ad7185ff4f686f27ca83d0bc6fddf0e19e6003d6ab9158e2df2d40c3bd5ca6d3053a06980994dd8e891f21a0a030da4abaff88466f091ea47ae5daa7fed9380eb4484fb721923fba858d6346aa9ab6b6b259dfdd0a37cda6ff5b54bf463c"], 0x16e) (async) msgget$private(0x0, 0x200) (async) msgrcv(r5, &(0x7f00000001c0)={0x0, ""/143}, 0x93, 0x0, 0x0) (async) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000001300)=""/225) (async) 03:58:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xff030000) 03:58:03 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x200) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES64=r3, @ANYRESDEC=r4], 0x2) 03:58:03 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04"], 0x1d) 03:58:03 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:58:03 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000aaaaaaaaaa0000000000f9dcc0a4c8859a385a05a0eddb4b182923c9eb080fdfa74376689a121b6a5c29fdc23915fd93272562ef41895c83e8d7f0ca8155d21cb6a3c64f3151cc72c7c7ac4444b4e1f35771ea9d6d7c27ad624e91c37797ebb035e7e339fe384c742b01b7"], 0x1d) 03:58:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xfffffdef) 03:58:03 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @none, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:58:04 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x9, 0xc9, 0x66}}}, 0x8) 03:58:04 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000aaaaaaaaaa0000000000f9dcc0a4c8859a385a05a0eddb4b182923c9eb080fdfa74376689a121b6a5c29fdc23915fd93272562ef41895c83e8d7f0ca8155d21cb6a3c64f3151cc72c7c7ac4444b4e1f35771ea9d6d7c27ad624e91c37797ebb035e7e339fe384c742b01b7"], 0x1d) 03:58:04 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000aaaaaaaaaa0000000000f9dcc0a4c8859a385a05a0eddb4b182923c9eb080fdfa74376689a121b6a5c29fdc23915fd93272562ef41895c83e8d7f0ca8155d21cb6a3c64f3151cc72c7c7ac4444b4e1f35771ea9d6d7c27ad624e91c37797ebb035e7e339fe384c742b01b7"], 0x1d) 03:58:04 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @none, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) [ 492.580680][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 492.605587][ T3662] Bluetooth: hci4: Received unexpected HCI Event 0x00 03:58:04 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x4, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x153}, @l2cap_cid_signaling={{0x14f}, [@l2cap_info_rsp={{0xb, 0x1, 0x70}, {0x6, 0xe02, "d4649868a0a1acf266c02f1f587d315af18903f43eb0b070e1e2967eb732dddd4a27b5c2dd3322a10e79efe575bb89d455a6a8e28253bdf2c1479665fb83a5cbcf50ff1a634d3e61cb0e07e957869f6e93b38b4bc00c5950f6a5223c6226a5c71772e443c2a2160824644378"}}, @l2cap_conf_rsp={{0x5, 0x3c, 0x1c}, {0x0, 0x0, 0xfff, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x1, 0x3ff, 0x7, 0x2, 0x2}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}]}}, @l2cap_info_rsp={{0xb, 0x3, 0xa1}, {0x3, 0x2, "546da9a7cc73ddbd01ac4255ea52664867d5bc2b513ffd3159f769cfd3e6d0b3381aced7458ccda8d9fbb9515e59b3195a8f1d03506006d92049a17050bcfe5c5fabbb810ba3c8eaa26dcea2200c4a3d939816ba63b35ac94f91a0814a519a993a7f44962a5de5ad6d6adf8ec34a87633e46aee55bef8ed999b4a2a428fa05902dcf97bdd15fea95a25d974c41cb72b3aff84bbb9d125908c9c3c8502d"}}, @l2cap_disconn_rsp={{0x7, 0x3, 0x4}, {0x40, 0x8}}, @l2cap_cmd_rej_unk={{0x1, 0xe9, 0x2}, {0x7}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x86, 0x1}}]}}, 0x158) 03:58:04 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01eb0900"], 0x1d) 03:58:04 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x200) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES64=r3, @ANYRESDEC=r4], 0x2) 03:58:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xffffff7f) 03:58:04 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x4, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x153}, @l2cap_cid_signaling={{0x14f}, [@l2cap_info_rsp={{0xb, 0x1, 0x70}, {0x6, 0xe02, "d4649868a0a1acf266c02f1f587d315af18903f43eb0b070e1e2967eb732dddd4a27b5c2dd3322a10e79efe575bb89d455a6a8e28253bdf2c1479665fb83a5cbcf50ff1a634d3e61cb0e07e957869f6e93b38b4bc00c5950f6a5223c6226a5c71772e443c2a2160824644378"}}, @l2cap_conf_rsp={{0x5, 0x3c, 0x1c}, {0x0, 0x0, 0xfff, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x1, 0x3ff, 0x7, 0x2, 0x2}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}]}}, @l2cap_info_rsp={{0xb, 0x3, 0xa1}, {0x3, 0x2, "546da9a7cc73ddbd01ac4255ea52664867d5bc2b513ffd3159f769cfd3e6d0b3381aced7458ccda8d9fbb9515e59b3195a8f1d03506006d92049a17050bcfe5c5fabbb810ba3c8eaa26dcea2200c4a3d939816ba63b35ac94f91a0814a519a993a7f44962a5de5ad6d6adf8ec34a87633e46aee55bef8ed999b4a2a428fa05902dcf97bdd15fea95a25d974c41cb72b3aff84bbb9d125908c9c3c8502d"}}, @l2cap_disconn_rsp={{0x7, 0x3, 0x4}, {0x40, 0x8}}, @l2cap_cmd_rej_unk={{0x1, 0xe9, 0x2}, {0x7}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x86, 0x1}}]}}, 0x158) 03:58:04 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @none, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @none, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) 03:58:04 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x4, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x153}, @l2cap_cid_signaling={{0x14f}, [@l2cap_info_rsp={{0xb, 0x1, 0x70}, {0x6, 0xe02, "d4649868a0a1acf266c02f1f587d315af18903f43eb0b070e1e2967eb732dddd4a27b5c2dd3322a10e79efe575bb89d455a6a8e28253bdf2c1479665fb83a5cbcf50ff1a634d3e61cb0e07e957869f6e93b38b4bc00c5950f6a5223c6226a5c71772e443c2a2160824644378"}}, @l2cap_conf_rsp={{0x5, 0x3c, 0x1c}, {0x0, 0x0, 0xfff, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x1, 0x3ff, 0x7, 0x2, 0x2}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}]}}, @l2cap_info_rsp={{0xb, 0x3, 0xa1}, {0x3, 0x2, "546da9a7cc73ddbd01ac4255ea52664867d5bc2b513ffd3159f769cfd3e6d0b3381aced7458ccda8d9fbb9515e59b3195a8f1d03506006d92049a17050bcfe5c5fabbb810ba3c8eaa26dcea2200c4a3d939816ba63b35ac94f91a0814a519a993a7f44962a5de5ad6d6adf8ec34a87633e46aee55bef8ed999b4a2a428fa05902dcf97bdd15fea95a25d974c41cb72b3aff84bbb9d125908c9c3c8502d"}}, @l2cap_disconn_rsp={{0x7, 0x3, 0x4}, {0x40, 0x8}}, @l2cap_cmd_rej_unk={{0x1, 0xe9, 0x2}, {0x7}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x86, 0x1}}]}}, 0x158) [ 492.762763][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:04 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x9, 0xc9, 0x66}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x9, 0xc9, 0x66}}}, 0x8) (async) 03:58:04 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04"], 0x1d) 03:58:04 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x9, 0xc9, 0x66}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x9, 0xc9, 0x66}}}, 0x8) (async) 03:58:04 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7a}, "ed15eb8ead13002b4cafe7e08470d4cae013447ce6343c2e8b30b8c1d1f03dc9c6118bea9860bb015b833f19554f013646568b90f535d6123db59eb6af36564ffeac186ff424a8e56b2601e5cafda54b8e023cf9e23b5a6cd886591ed0c404e7dfcdb90033e483e22844cdfd9d9cb19315c4bda2173c02f06fc9"}, 0x7e) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04ff801bdf36fb4e4129c19872a02e47f00d58e17523a848adf6f05bc7d1865c51d8e597e0a0462f66e5f0190710a78d714b6a1bfc9fba99f46dc721a3e61d1f303377153caf6791f984bce5f8a9d3e649873d56aa80f1c27cb1dec575cf36c3a0c52386ec2bcb0ce2188ffb349c89ad701efa08c2ed62f9348d13e29bfa8018821d065fdebcf749"], 0x83) [ 492.843604][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 492.876389][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:04 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @any, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:58:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x4000000000000) [ 492.936361][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 492.943916][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:04 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "b20b7e56687da0b789a21486590a82d080780e5cfbd5ad4d2b743c477e2c0d48f8e0b23f58bbd6c207f54931d91bcd1ad062b038fbba32e535b269ffe979c687cbc41fad971af755660ebcfbd36061e258c3617feede1e218f2e10f8844bd118dea6ac3c701c993f11456eaa4ad916b9e346827ecee323d51ba47552f14842d42e886daeb35f89376e9011cf64fbd5024b88caa1c51fa9b9d3e086f961d184d41ddad835608d9ae815de450dc842f69df4f055fa322b285f230d4791d85d571ad90286ddce16a94256cdf89794e2398d344a9def763b46dec59860b74f6ebd6154acb83c6c35b10c8046f5494fd8554cd6e817e4944e95078afe8fa0dc1e380598699d138da53127a4f0f0ae7dd5e505f5dfd9e3caa78c300b709a1d5dfad3cb215eebc870fef8b55b2da464cf9841cab2912cd6ce4acd7a673cbc6f30a05720b59601cae1bd965231fe89e45db7b2c7c4c53bf36c6f622f5ddcab95a43fa55235db005a06dbb09b3c451c2ffbfdd92816186f1cea9b784980bee0982a53bdb6c3fda1f8358a55ed7c5b5b05fdf543052adc19fd880efb7668a5f4cc4521053b895f436622f70050d7365303dac598683e3ccd570262c715d755879d9dbc5856a8f0909ce3eb648c72f643f761fccc606d19ef50ad51d6ab9f29295107950162aefc00fec9c9a012eacb710473383883055d00ad92c599588a5e727dcfaed584452083f51635ea64e9d9d217f5caf69d347768553525f68c30a983d2b7ee188601ccf0285dde49ed9e0ad6f526308fca6d3d2d29f99b2c33f53a5810a4d7b81ca631aaa1379d0b0cdb6a4d1250668a5a53313932306a51b791f49d0b6a7b7865d3421ba4710c26ecd2726204a0260f25cb4338fc30b328db0f798c9b5b0945d209c858c7d7c05e803fcaf0bab3f76d8d1974359db268708b9fe65a447fc47d0ec94a89b0187f63628524a0c82da6045dffeade314441198f7ee82ed74eabdd760feb793e739ca1d85a46ffd177b4753b9c2a6f5f7f06c07f31e748343fa4d1fbe8dac7a2b03788453cb1f88e4cdd974cea799dc61d728274f270c5d3d6f70c565dde92603b2caeaf37d06b3bc0c64bca759a1bb5203e950d72306baa744de5cfa0bb55366cdf684d5a294017b4f07b4dd19ebb6664a3bc0e85ffc22563e492e377257a995faaa7ad7aea84a7e8f9248f05bd163fefcda4950b6a0a2931886b23c3f045c6d86192f6a781a21be04f816e44ad25e54bfd3d325d6d90c0ff73f23183b60ca8fa28688409b4dd5b339dd3f864369e2611a53ac5bcfb39215a0b1723231a3f175a49bba28929cbb8fc318c41d3053df6207bafc13e30b94507d2f93939ff45e50df4dc56d49a172ad528d4f48f7e0863d9ece522973bdf2925356a38383e23a4ead5f33ddb8cec462a83a9fbd701d750b0acaef0ea307e3daf511921ac2ddfc0bd1dc35aaa46749f986e5f4b932b3595c202428604bf6d09f7191cf3bb0537fea085cb0704b528cda741ad52e98f0b0288438a0776837a48adb6522a4ad19d852f05b6a6daf703355e9c67974077d30c5ff803320bec685356be7e6ab088b32c75d9318e6fdd8100f42726a09a2c467aebceeec39f2a54590af9d6823a34d582c494eadb3c3362b7f18e3d606eb1e00643275c5ebf61c48133ecb97a2a0ed7d6c31db21630090d8987e5666b545c4d6f82ac004c962735353474965f83efa9ae0247678134a135596c17f7c47d71fc759836d0eccf613673331bfaddbce745e024386c24ec88f5922192c283ac6edbd50d5a61932336d16b0aa792724561b2f0cf140e33158af9abe4b3af180c8b5f2402d7ad4243d91ec24b76e56e370c69a93163db9ccc0490e5bd6c54b91e2a64b7056004fcee4dea6871783c952cb132bc3a1188c6b96f12c62545033ca4e797bbf8b279a8179fcbda2d6bf3c576d3d70e380da83a027728291aa289f305cb3dd46b0ae7a4bfda88f64dd9f6c75bef63b359531c49ecdf42084a8647a721f69a3a2681a370dbfe59c69b8371b586e84a40b1ebd4d6484309ad7b587bbe38404dc6a368b2bd803b323f11f308295b992325d114a2a8cd39431685b5e2db0da8d5f4ac3f79c5efc46135cd5f487b7b8a19f69e01bbd9a0acbc691007135e145b0e57855ffd281f25a94f9e39b5e69eec86361ec8fceabdeeeecd9c97e866778357d26b7fd64c64cfd0017ddeede81851706c18de2d82dd5b04f3ea1f6a75ed40704395168672d7ab2eb51a28a58df741cf4f8df99de089da9315eb1a7314970401e368e80272f737adc1173e66af6a84a855d8bb0d24ef8b3e63498cb787f0ab699a107a93adf970801f42369544f93ccade593611eb5ae7a83037fb2be05767f2ebf6e35b92cd6628efbf9db19179bf7bca3fdc287d68df34b863021bb22c59f5a938b41ddfc3b197606bf9c22b47ec6dc2a0d5f6229b023b26663893a356a2140ff4c0d842d322934d0f5b371d0fe32b9a89971bb6f9517b53c30abfb72c5c905d1dfb5f7a3b652df056ca823e6deb31d17437752e312daf313504a40a43eb5c08e31f149312f223224133f66c552131591ad3010aee9a293c1975a36a5a14c709a3e8cbfce313ce370ee4fd275d3220947b013b72facc3e4f48ddab52fcd317dca9ee8dc1165b469ebc7e8db97549f5d1f7761b17fdf0e39274c757723bc9a8aa2d86fe50fe0d4d89da2ffbef935a549afeeb1760b18a553e8c97efb46f5ef4cf3f5e33ff39444f19a87491589189242dfc7faa1501df2d4d34c2da5679117a737cb985401c33b9612356c8918604672db7e1ef2057ebdab202f4ecc7f785c0d8cd8779b5fd24f889ff5dffef93b9556d621009c422152bded357035913aa1d511b2c08f6b5531717d635c045a0779c4148f2d2a8be4412a848d189ba7ebbb1d53927f5f669646cc1243e2e00a467102d1d86c8e2cd5508a9d8240e04142b15de999498f0cf50cff69b62f11ff4740b650b5fc16ca9a07ddf3f224311826b8aa5f4792a5b98a41cdc88fec44a3e820a36a5a6d94aaf0528e335a5e4053ccc1c6050cec280e7cef2617061b070c4ab36c1895b08dbac020138a944a4e82f049deab1845eef0bdf4070663224e7f63ead81c9dc3fbddacc593b341c88285d926c8c15fef1a14cafa0458c9b7244da2166532f8add74cb5b9703eedbdeb83def9e78a84b8ee990d70b1ce89739e504c1631a0fde73d39ca55430842b3d565786a54c51bea2d62b4a04ea7b84e87c188e755c2e44aa70d6ea0b7a1af2e7ec9f9520d5f666d2955a56a47ea20afdd0a7ec7e52aa2f4990f8a58bd3f9b8e184a2b87604eef5c89b0561a3180410411ee740c59e75b54b92424ba392015b191d7b85d129606ad9fdd1d690d3a9c160b0fcb43cfedd69a75c8847d551e02d0907359a8aed55ba3aeb3cd3276a162c113a266e26373352d8b11a100a0bd613cc0a858bb4daaa5558ebee7b3a0f1da66c021b4f9919ebecf758bc4a2f894d128421bb0d1b5770569e5518216a16b9c2d5fd72526364023116ef923041150ce40dad0e83cc94d92ddadb8219e57132eaca7113928a9c64c0ab4074e61698b4d84ca843f891a37842deac18ebbffca41583cedf7bb3a2cbfbd3a4b5599839ac55db628e9201f215b384c7a48f4b2fd1e2836ef006c3d8b6e68629813408a6728ed2f55667c44bda24e446b5f02f8a30f8a8753ef825d914f8baeab0303f766f086955c80491e1cb7dac01e559627ac7c1a0ba9418c71a1b33139841e47fd8a5327cdf6cae897625d35f11c0f508fa8f0e2dad6f46c8a8731d9d0741457c008f243026653c4cc0cbcc42a801e907a66dc832c17e90f1bf396cc1018b6c5a793260b8ee6da5f58d9316488ffcd826b888115cc3a3c543c0fd49a04d5a4004a0bb9dc712ca8fb2b432c5b1febd8491b176bc54d258444556efe10887de83528eb6d7d2fa76b17c3b21c2afb720b4567ccad8c042e7f17a5b80b7ffb8797227f3192c3ee1614c07c9a1bc9d2053569e24d41f99b584f4e6317cf32850223c933a0ab09bc15d8f7f6c2344cf17018d51f13eac74d6b7ba81d3294df781ec0920b3b66e4f00fce4447797b7cfe535b51abafb588582e33d61c02676ee82ebf1d47d6cafae3f4fb5edbe80edc86deee66221e3a20323cbea0034a56f6458b74bc802b37193d066e54bb79d3cb9a268e45d8110d14317662bdbc176175f84f4a47c090187e6ae464fba512a136993d71b3f043b9211b4a3aaa4d3f73a72d1d7d22a07e59119925e2eb3997b3835dd2182ab1acccdd8ed80f1c6e6060b76cc0fc89068c543c6d95d0d1eefab47cdf70218936f3523d9ee4a0fca6828181b6b014f3ea48e4ff97c4f0248ebb11e0d18dae489e0b5ee2ab133c5b00afab8ac2f50946baa09e2cca8395189bf5e57cfab6908adc524d522ae53e72ce32ccf8544fe172505ca8b54b8cf485dfa1607fa106dab06c4c9393d2f7bb0860f736b5c853ecdeec70fd6ba1314e5307674aa3d92123720a65fef1d9f46128ea4a407174aa2f78dd4b0b597598b9036da588ab61948e6d6f9fb5be7d2c88bbe60af57266ad2a85bcd8a79260b1cf80ca63f221844de571e44cba2417ac60e6ad6843eabab7757f4e436b8727d632c20caa6574c33c6e0ccba16133f89d826d626b7184076229e823a3ffdf43d29ccb292b349b477b5166efe30f704456a4ecd585b6c4958635c91c5d0ed114694409c5d7e70a818442807c6b6ea129d4293c34634526c6858de84457e7d00f540e679e3cfacb66ab4e146e2675db424ec7ea779a167dead2fbc97649cf7cf985fcf234da6dc87a5f95593efde8acd3ca94aa4ddb215c07482949e1ff1081b9e7b837928cc108bafdbddf1c3e6a98c3f08fb16ac6a9cfa60cea5712a56fab17b2ec67fb2e9741f18d7f3e9cc80258c4e130c635f28500ba223699a8c674a5be3b60d0356187e3d5b1fec6257250ffb09497db8331c2da50435b3d48af479e29130b4ccebc44dab9a91d979d8873adb3d686460c53a0baf037e8fe27f2ca9e3a56e24dd736370baa95a8020920b82155b69058e28a912cea81c3120708616a54b9525a0f86bc4ff2174a361cd58e2a2b5f039139498f0417fea6f2fed58d07d70cbf52c3e7e6a2f8deb04f95112566b81e606cc80ef4678c532454a0b252e3711320b6e52c16e5fe0c5c22bcc8775e61aa72a384c66c14888f437f9223ed8071d3ef23555fbc02d9a590b75540e1cb94e642c8e73e07840dc444687faa5b252c69091ba7503394864687c6a95ff78a904635ba9ab816eb81d2ffdf9b357d5dd5b97710779672360784d292e64c6a579d7933d1c76c174037c290eb4722ee02210ef79f42cdd5ac0b73b555a337a111829a4be5870f3db984d921fad298e1e9467cd9e3fb950f024f7e95589dddb147bac312d848dcb89db8c51b64daa0c318e315376abcd4bc257adff3a76eb13c7916c59fffb2536166f767869879885ca6006e21104baebe523085fb729450197595597a21ce457bee0522b6d3f384e0794954d989980c9a3bd2edca1437a032a73a260ff64c9bf0ac7c33d5788fbba99bc7a5a4488b6bd0ed98db1fcfeb00d517549b002386aa767288679de50f3d10e11f935dd105d2097e2f5bd8a29ef5859d73e45370a5bdde1e67720ffe1078dcf1109d487a950880813b172c3ecd83e251187a53b4eba8f2897e30dec49206ce143f55b0d65e8874d23de591bd29a1cbb1f2b0b05265ec9d8ba8f5dac80b12e2b8d47ef237141e412f370417beb2e4e1a6da8"}, 0x1004) [ 492.984364][ T3662] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.080731][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:05 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc9, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) 03:58:05 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04"], 0x1d) 03:58:05 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @any, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @any, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) 03:58:05 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7a}, "ed15eb8ead13002b4cafe7e08470d4cae013447ce6343c2e8b30b8c1d1f03dc9c6118bea9860bb015b833f19554f013646568b90f535d6123db59eb6af36564ffeac186ff424a8e56b2601e5cafda54b8e023cf9e23b5a6cd886591ed0c404e7dfcdb90033e483e22844cdfd9d9cb19315c4bda2173c02f06fc9"}, 0x7e) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04ff801bdf36fb4e4129c19872a02e47f00d58e17523a848adf6f05bc7d1865c51d8e597e0a0462f66e5f0190710a78d714b6a1bfc9fba99f46dc721a3e61d1f303377153caf6791f984bce5f8a9d3e649873d56aa80f1c27cb1dec575cf36c3a0c52386ec2bcb0ce2188ffb349c89ad701efa08c2ed62f9348d13e29bfa8018821d065fdebcf749"], 0x83) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7a}, "ed15eb8ead13002b4cafe7e08470d4cae013447ce6343c2e8b30b8c1d1f03dc9c6118bea9860bb015b833f19554f013646568b90f535d6123db59eb6af36564ffeac186ff424a8e56b2601e5cafda54b8e023cf9e23b5a6cd886591ed0c404e7dfcdb90033e483e22844cdfd9d9cb19315c4bda2173c02f06fc9"}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04ff801bdf36fb4e4129c19872a02e47f00d58e17523a848adf6f05bc7d1865c51d8e597e0a0462f66e5f0190710a78d714b6a1bfc9fba99f46dc721a3e61d1f303377153caf6791f984bce5f8a9d3e649873d56aa80f1c27cb1dec575cf36c3a0c52386ec2bcb0ce2188ffb349c89ad701efa08c2ed62f9348d13e29bfa8018821d065fdebcf749"], 0x83) (async) 03:58:05 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) (async) 03:58:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x20000000000000) 03:58:05 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7a}, "ed15eb8ead13002b4cafe7e08470d4cae013447ce6343c2e8b30b8c1d1f03dc9c6118bea9860bb015b833f19554f013646568b90f535d6123db59eb6af36564ffeac186ff424a8e56b2601e5cafda54b8e023cf9e23b5a6cd886591ed0c404e7dfcdb90033e483e22844cdfd9d9cb19315c4bda2173c02f06fc9"}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04ff801bdf36fb4e4129c19872a02e47f00d58e17523a848adf6f05bc7d1865c51d8e597e0a0462f66e5f0190710a78d714b6a1bfc9fba99f46dc721a3e61d1f303377153caf6791f984bce5f8a9d3e649873d56aa80f1c27cb1dec575cf36c3a0c52386ec2bcb0ce2188ffb349c89ad701efa08c2ed62f9348d13e29bfa8018821d065fdebcf749"], 0x83) [ 493.632059][ T3662] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.664509][ T3662] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 493.674206][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:05 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @any, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:58:05 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04"], 0x1d) [ 493.684284][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 493.691632][ T3662] CPU: 0 PID: 3662 Comm: kworker/u5:7 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 493.691669][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 493.711898][ T3662] Workqueue: hci5 hci_rx_work [ 493.716668][ T3662] Call Trace: [ 493.719970][ T3662] [ 493.722909][ T3662] dump_stack_lvl+0xcd/0x134 [ 493.727496][ T3662] sysfs_warn_dup.cold+0x1c/0x29 [ 493.732467][ T3662] sysfs_create_dir_ns+0x233/0x290 [ 493.737572][ T3662] ? sysfs_create_mount_point+0xb0/0xb0 [ 493.743112][ T3662] ? rwlock_bug.part.0+0x90/0x90 [ 493.748073][ T3662] ? do_raw_spin_unlock+0x171/0x230 [ 493.753268][ T3662] kobject_add_internal+0x2c9/0x8f0 [ 493.758509][ T3662] ? kasan_quarantine_put+0xb1/0x210 [ 493.763790][ T3662] kobject_add+0x150/0x1c0 [ 493.768200][ T3662] ? kset_create_and_add+0x1a0/0x1a0 [ 493.773521][ T3662] ? kfree_const+0x51/0x60 [ 493.777947][ T3662] ? kfree+0xe2/0x580 [ 493.781919][ T3662] ? rcu_read_lock_sched_held+0x3a/0x70 [ 493.787456][ T3662] device_add+0x368/0x1e90 [ 493.791912][ T3662] ? dev_set_name+0xbb/0xf0 [ 493.796401][ T3662] ? device_initialize+0x540/0x540 [ 493.801498][ T3662] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 493.807731][ T3662] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 493.813749][ T3662] ? lock_downgrade+0x6e0/0x6e0 [ 493.818591][ T3662] ? hci_event_packet+0x425/0xfd0 [ 493.823608][ T3662] hci_conn_add_sysfs+0x9b/0x1b0 [ 493.828563][ T3662] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 493.834360][ T3662] ? hci_cc_le_set_random_addr+0x290/0x290 [ 493.840155][ T3662] ? wait_for_completion_io_timeout+0x20/0x20 [ 493.846229][ T3662] hci_le_meta_evt+0x2b8/0x510 [ 493.850986][ T3662] ? hci_cc_le_set_random_addr+0x290/0x290 [ 493.856821][ T3662] hci_event_packet+0x63d/0xfd0 [ 493.861665][ T3662] ? hci_conn_drop+0x2f0/0x2f0 [ 493.866434][ T3662] ? hci_cs_create_conn+0x3a0/0x3a0 [ 493.871629][ T3662] ? kcov_remote_start+0x156/0x7a0 [ 493.876762][ T3662] hci_rx_work+0xae7/0x1230 [ 493.881276][ T3662] process_one_work+0x991/0x1610 [ 493.886226][ T3662] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 493.891595][ T3662] ? rwlock_bug.part.0+0x90/0x90 [ 493.896530][ T3662] ? _raw_spin_lock_irq+0x41/0x50 [ 493.901552][ T3662] worker_thread+0x665/0x1080 [ 493.906227][ T3662] ? __kthread_parkme+0x15f/0x220 [ 493.911242][ T3662] ? process_one_work+0x1610/0x1610 [ 493.916434][ T3662] kthread+0x2e4/0x3a0 [ 493.920491][ T3662] ? kthread_complete_and_exit+0x40/0x40 [ 493.926115][ T3662] ret_from_fork+0x1f/0x30 [ 493.930530][ T3662] 03:58:05 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc9, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) 03:58:05 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) (rerun: 32) [ 493.935442][ T3662] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 493.950767][ T3662] Bluetooth: hci5: failed to register connection device 03:58:05 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="013eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72dbe2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cff7fffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) [ 494.009591][ T3662] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 494.020357][ T3662] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 494.030018][ T3662] CPU: 0 PID: 3662 Comm: kworker/u5:7 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 494.040201][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 494.050273][ T3662] Workqueue: hci5 hci_rx_work [ 494.054970][ T3662] Call Trace: [ 494.058246][ T3662] [ 494.061176][ T3662] dump_stack_lvl+0xcd/0x134 [ 494.065780][ T3662] sysfs_warn_dup.cold+0x1c/0x29 [ 494.070729][ T3662] sysfs_create_dir_ns+0x233/0x290 [ 494.075847][ T3662] ? sysfs_create_mount_point+0xb0/0xb0 [ 494.081397][ T3662] ? rwlock_bug.part.0+0x90/0x90 [ 494.086365][ T3662] ? do_raw_spin_unlock+0x171/0x230 [ 494.091570][ T3662] kobject_add_internal+0x2c9/0x8f0 [ 494.096780][ T3662] kobject_add+0x150/0x1c0 [ 494.101204][ T3662] ? kset_create_and_add+0x1a0/0x1a0 [ 494.106496][ T3662] ? lockdep_init_map_type+0x21a/0x7f0 [ 494.111965][ T3662] ? __raw_spin_lock_init+0x36/0x110 [ 494.117267][ T3662] device_add+0x368/0x1e90 [ 494.121692][ T3662] ? dev_set_name+0xbb/0xf0 [ 494.128207][ T3662] ? device_initialize+0x540/0x540 [ 494.133347][ T3662] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 494.139627][ T3662] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 494.145628][ T3662] ? lock_downgrade+0x6e0/0x6e0 [ 494.150487][ T3662] ? hci_event_packet+0x425/0xfd0 [ 494.155554][ T3662] hci_conn_add_sysfs+0x9b/0x1b0 [ 494.160515][ T3662] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 494.166341][ T3662] ? hci_cc_le_set_random_addr+0x290/0x290 [ 494.172179][ T3662] ? wait_for_completion_io_timeout+0x20/0x20 [ 494.178261][ T3662] hci_le_meta_evt+0x2b8/0x510 [ 494.183036][ T3662] ? hci_cc_le_set_random_addr+0x290/0x290 [ 494.188862][ T3662] hci_event_packet+0x63d/0xfd0 [ 494.193720][ T3662] ? hci_conn_drop+0x2f0/0x2f0 [ 494.198520][ T3662] ? hci_cs_create_conn+0x3a0/0x3a0 [ 494.203744][ T3662] ? kcov_remote_start+0x156/0x7a0 [ 494.208883][ T3662] hci_rx_work+0xae7/0x1230 [ 494.213401][ T3662] process_one_work+0x991/0x1610 [ 494.218353][ T3662] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 494.223736][ T3662] ? rwlock_bug.part.0+0x90/0x90 [ 494.228688][ T3662] ? _raw_spin_lock_irq+0x41/0x50 [ 494.233732][ T3662] worker_thread+0x665/0x1080 [ 494.238423][ T3662] ? __kthread_parkme+0x15f/0x220 [ 494.243450][ T3662] ? process_one_work+0x1610/0x1610 [ 494.248674][ T3662] kthread+0x2e4/0x3a0 [ 494.252745][ T3662] ? kthread_complete_and_exit+0x40/0x40 03:58:05 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x80}}, 0x4) 03:58:05 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc9, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc9, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) 03:58:05 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01"], 0x1d) 03:58:05 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="013eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72dbe2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cff7fffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="013eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72dbe2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cff7fffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) (async) [ 494.258382][ T3662] ret_from_fork+0x1f/0x30 [ 494.262817][ T3662] [ 494.268935][ T3662] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 494.282872][ T3662] Bluetooth: hci5: failed to register connection device [ 494.341132][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.348739][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.356707][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.364637][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.380105][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.387450][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.394836][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.402879][ T3662] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 494.412408][ T3662] CPU: 0 PID: 3662 Comm: kworker/u5:7 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 494.422569][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 494.432625][ T3662] Workqueue: hci5 hci_rx_work [ 494.437302][ T3662] Call Trace: [ 494.440582][ T3662] [ 494.443519][ T3662] dump_stack_lvl+0xcd/0x134 [ 494.448131][ T3662] sysfs_warn_dup.cold+0x1c/0x29 [ 494.453100][ T3662] sysfs_create_dir_ns+0x233/0x290 [ 494.458247][ T3662] ? sysfs_create_mount_point+0xb0/0xb0 [ 494.463815][ T3662] ? rwlock_bug.part.0+0x90/0x90 [ 494.468777][ T3662] ? do_raw_spin_unlock+0x171/0x230 [ 494.473988][ T3662] kobject_add_internal+0x2c9/0x8f0 [ 494.479199][ T3662] kobject_add+0x150/0x1c0 [ 494.483619][ T3662] ? kset_create_and_add+0x1a0/0x1a0 [ 494.488911][ T3662] ? lockdep_init_map_type+0x21a/0x7f0 [ 494.494383][ T3662] ? __raw_spin_lock_init+0x36/0x110 [ 494.499682][ T3662] device_add+0x368/0x1e90 [ 494.504120][ T3662] ? dev_set_name+0xbb/0xf0 [ 494.508627][ T3662] ? device_initialize+0x540/0x540 [ 494.513751][ T3662] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 494.520009][ T3662] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 494.526000][ T3662] ? lock_downgrade+0x6e0/0x6e0 [ 494.530854][ T3662] ? hci_event_packet+0x425/0xfd0 [ 494.535908][ T3662] hci_conn_add_sysfs+0x9b/0x1b0 [ 494.540870][ T3662] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 494.546697][ T3662] ? hci_cc_le_set_random_addr+0x290/0x290 [ 494.552532][ T3662] ? wait_for_completion_io_timeout+0x20/0x20 [ 494.558631][ T3662] hci_le_meta_evt+0x2b8/0x510 [ 494.563418][ T3662] ? hci_cc_le_set_random_addr+0x290/0x290 [ 494.569242][ T3662] hci_event_packet+0x63d/0xfd0 [ 494.574101][ T3662] ? hci_conn_drop+0x2f0/0x2f0 [ 494.578875][ T3662] ? hci_cs_create_conn+0x3a0/0x3a0 [ 494.584078][ T3662] ? kcov_remote_start+0x156/0x7a0 [ 494.589217][ T3662] hci_rx_work+0xae7/0x1230 [ 494.593744][ T3662] process_one_work+0x991/0x1610 [ 494.598704][ T3662] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 494.604092][ T3662] ? rwlock_bug.part.0+0x90/0x90 [ 494.609045][ T3662] ? _raw_spin_lock_irq+0x41/0x50 [ 494.614096][ T3662] worker_thread+0x665/0x1080 [ 494.618796][ T3662] ? __kthread_parkme+0x15f/0x220 [ 494.623825][ T3662] ? process_one_work+0x1610/0x1610 [ 494.629044][ T3662] kthread+0x2e4/0x3a0 [ 494.633114][ T3662] ? kthread_complete_and_exit+0x40/0x40 [ 494.638753][ T3662] ret_from_fork+0x1f/0x30 [ 494.643207][ T3662] [ 494.648789][ T3662] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 494.662047][ T3662] Bluetooth: hci5: failed to register connection device [ 494.669617][ T3662] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 494.679123][ T3662] CPU: 0 PID: 3662 Comm: kworker/u5:7 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 494.689268][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 494.699308][ T3662] Workqueue: hci5 hci_rx_work [ 494.703977][ T3662] Call Trace: [ 494.707244][ T3662] [ 494.710161][ T3662] dump_stack_lvl+0xcd/0x134 [ 494.714742][ T3662] sysfs_warn_dup.cold+0x1c/0x29 [ 494.719670][ T3662] sysfs_create_dir_ns+0x233/0x290 [ 494.724832][ T3662] ? sysfs_create_mount_point+0xb0/0xb0 [ 494.730379][ T3662] ? rwlock_bug.part.0+0x90/0x90 [ 494.735316][ T3662] ? do_raw_spin_unlock+0x171/0x230 [ 494.740515][ T3662] kobject_add_internal+0x2c9/0x8f0 [ 494.745708][ T3662] ? asm_exc_stack_segment+0x11/0x30 [ 494.750999][ T3662] kobject_add+0x150/0x1c0 [ 494.755410][ T3662] ? kset_create_and_add+0x1a0/0x1a0 [ 494.760689][ T3662] ? lockdep_init_map_type+0x21a/0x7f0 [ 494.766144][ T3662] ? __raw_spin_lock_init+0x36/0x110 [ 494.771452][ T3662] device_add+0x368/0x1e90 [ 494.775867][ T3662] ? dev_set_name+0xbb/0xf0 [ 494.780378][ T3662] ? device_initialize+0x540/0x540 [ 494.785481][ T3662] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 494.791721][ T3662] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 494.797697][ T3662] ? lock_downgrade+0x6e0/0x6e0 [ 494.802539][ T3662] ? hci_event_packet+0x425/0xfd0 [ 494.807579][ T3662] hci_conn_add_sysfs+0x9b/0x1b0 [ 494.812511][ T3662] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 494.818323][ T3662] ? hci_cc_le_set_random_addr+0x290/0x290 [ 494.824124][ T3662] ? wait_for_completion_io_timeout+0x20/0x20 [ 494.830194][ T3662] hci_le_meta_evt+0x2b8/0x510 [ 494.834947][ T3662] ? hci_cc_le_set_random_addr+0x290/0x290 [ 494.840763][ T3662] hci_event_packet+0x63d/0xfd0 [ 494.845602][ T3662] ? hci_conn_drop+0x2f0/0x2f0 [ 494.850357][ T3662] ? hci_cs_create_conn+0x3a0/0x3a0 [ 494.855553][ T3662] ? kcov_remote_start+0x156/0x7a0 [ 494.860665][ T3662] hci_rx_work+0xae7/0x1230 [ 494.865169][ T3662] process_one_work+0x991/0x1610 [ 494.870126][ T3662] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 494.875506][ T3662] ? rwlock_bug.part.0+0x90/0x90 [ 494.880433][ T3662] ? _raw_spin_lock_irq+0x41/0x50 [ 494.885454][ T3662] worker_thread+0x665/0x1080 [ 494.890142][ T3662] ? __kthread_parkme+0x15f/0x220 [ 494.895183][ T3662] ? process_one_work+0x1610/0x1610 [ 494.902113][ T3662] kthread+0x2e4/0x3a0 [ 494.906173][ T3662] ? kthread_complete_and_exit+0x40/0x40 [ 494.911821][ T3662] ret_from_fork+0x1f/0x30 [ 494.916239][ T3662] [ 494.922085][ T3662] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 494.929177][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:06 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="013eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72dbe2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cff7fffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="013eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72dbe2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cff7fffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) (async) [ 494.935915][ T3662] Bluetooth: hci5: failed to register connection device [ 494.943451][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.957177][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.966211][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.973889][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.981830][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.989625][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 494.997073][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.004604][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.011943][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.019323][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.026623][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.033969][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.041288][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.048607][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.056164][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.063497][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.071069][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.079827][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.087165][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.094521][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.101910][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.109245][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.116546][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.123962][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 495.131370][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x40030000000000) 03:58:06 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x80}}, 0x4) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x80}}, 0x4) (async) 03:58:06 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc9, "9b25b3", "2044e4", "0299cd", '|*b', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8}}}}, 0x20) 03:58:06 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xa751]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10080, 0x98) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000480)={[{0x8000, 0x3, 0xff, 0x20, 0x81, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x63}, {0x100, 0xf, 0x7, 0xff, 0x1, 0x9, 0xb1, 0x1, 0x1f, 0x99, 0x1, 0x1, 0x81}, {0x1, 0x40, 0xff, 0x2, 0x0, 0x10, 0x3, 0x3f, 0x0, 0x1f, 0x0, 0x3, 0x10001}], 0x26e6f69}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0x500, 0x0) r8 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r10 = syz_open_dev$vcsu(&(0x7f0000000340), 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=@raw=[@initr0, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000140)='GPL\x00', 0xff, 0x43, &(0x7f0000000180)=""/67, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0xd8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0, r1, r4, 0xffffffffffffffff, r7, r8, r9, r10, 0xffffffffffffffff]}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000400)="fb", 0x1) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x4, &(0x7f0000000940)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x0, r3, &(0x7f0000000540)="d88219890b7605361af42c2719fde6eb251a10f5a2326f07fdfea9a88f606d266eda4d4b1171dbe7a08710b53ec46e65f7276e70714a432ced97d3ad1eee6fd4cd3b330b1b2db9818280a42da20066f749cd45ba94b0d62c81e7a070b6ecfde032b8755497f9ffd78febf543e0028d24fc6e617ad88da566f2b77dd26d268c0c84e6569ab6c3e3367dd4165f743471f62b53a976f1ee98c5231056c04726bb2eca4e7383763890e94c0580a9969411374b30418c57d66e0eab93d9642bd63dc79fed7405aeed107d80a1a73d82665de0ee61f41d01f3809d", 0xd8, 0x80000000, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000680)="b1094f15ad347bb829988218b84542d8dd49e95aff62be38d8281363384d7f35353afcd5e9d41e5f7bd1060d30e69cc68b784da47201071d52e32e7ce6498aa434f2322881f0d74c53620d516bafcc642d72d0be136085deaeacb7cfbba0f0e77f61b885430e968a4889bb33ea74844350fada252aac2d5a7ab11a2b52674a50efc8695abc89e754492439be4adb53ccba1991", 0x93, 0x1, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x110, r11, &(0x7f0000000780)="62b688dcdd6786895ed28b62e3dfd63fb21db5f43f54da9fbe4ac2952950fe2c88505c7911eb2c5cd169ec", 0x2b, 0xffffffffffffff25, 0x0, 0x1, r12}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x2, r13, &(0x7f0000000880)="5d611c4646cf81cfe9047cdf5e7b828d8975a883551409441b2ae57a84076dc9370fce96d9eb2ab2549c99bd6d98025e914070a8a956200894c084c80d62c168e538bc54230e16fa76d67aa94543922498e505985c3e68bac02d33f93c2b5f3c60d1", 0x62, 0xfffffffffffffff7, 0x0, 0x1, r10}]) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:58:06 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) pipe(&(0x7f0000000080)) fanotify_init(0x0, 0x101000) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400), 0xb0040, 0x0) splice(r5, 0x0, r1, 0x0, 0x500, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="7c8b2ccce5bab08f9518fbef5b6fbeffb7101ec5dfc7a656ded037a69de8e289aa3ff817bf2ca7d199a3359ddab0f308dd042ee7946bec0655fdaa8dc77c5bdba8614ff01d8dd2daa049d60b042e0c61031fd437b8948cc655769f5e313fd20440eedca7195383ae243c0dcb8717ad4db40056c90917e374ef2d5a5928826ac20688dcd025f9d115599037c47a061fd487f8c4c4878220cfe3fd5fb456c7b75656ad31dea7b6a7133b95f36e25ceca036d0e68f7f04ba51ef9f7783ea23e4e83513d2a8ffa75e58140598ab47703bb7874d69c18b1a4f3c874977bd88b42788a707f7f3af5905d1c8c3bd59d6c", 0xed}, {&(0x7f0000000380)="9f5807d63d5661b0787c58630116178595254f3e03a48d3f7dfcdc7ebed06d84fe796da222208574a315e43b403e794b22558e98e151aa9c55f8e1af96f48a58a3b707e8f4", 0x45}, {&(0x7f0000000400)}], 0x3) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRES16=r4], 0x10) 03:58:06 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01"], 0x1d) 03:58:06 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x80}}, 0x4) [ 495.246394][ T3658] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 495.256457][ T3658] CPU: 1 PID: 3658 Comm: kworker/u5:5 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 495.266651][ T3658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 495.276731][ T3658] Workqueue: hci5 hci_rx_work [ 495.281455][ T3658] Call Trace: [ 495.284748][ T3658] [ 495.287688][ T3658] dump_stack_lvl+0xcd/0x134 [ 495.292305][ T3658] sysfs_warn_dup.cold+0x1c/0x29 [ 495.297277][ T3658] sysfs_create_dir_ns+0x233/0x290 [ 495.302400][ T3658] ? sysfs_create_mount_point+0xb0/0xb0 [ 495.307952][ T3658] ? rwlock_bug.part.0+0x90/0x90 [ 495.312920][ T3658] ? do_raw_spin_unlock+0x171/0x230 [ 495.318144][ T3658] kobject_add_internal+0x2c9/0x8f0 [ 495.323385][ T3658] kobject_add+0x150/0x1c0 [ 495.327806][ T3658] ? kset_create_and_add+0x1a0/0x1a0 [ 495.333103][ T3658] ? lockdep_init_map_type+0x21a/0x7f0 [ 495.338575][ T3658] ? __raw_spin_lock_init+0x36/0x110 [ 495.343893][ T3658] device_add+0x368/0x1e90 [ 495.348319][ T3658] ? dev_set_name+0xbb/0xf0 [ 495.352828][ T3658] ? device_initialize+0x540/0x540 [ 495.357949][ T3658] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 495.364197][ T3658] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 495.370195][ T3658] ? lock_downgrade+0x6e0/0x6e0 [ 495.375055][ T3658] ? hci_event_packet+0x425/0xfd0 [ 495.380097][ T3658] hci_conn_add_sysfs+0x9b/0x1b0 [ 495.385060][ T3658] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 495.390880][ T3658] ? hci_cc_le_set_random_addr+0x290/0x290 [ 495.396696][ T3658] ? wait_for_completion_io_timeout+0x20/0x20 [ 495.402786][ T3658] hci_le_meta_evt+0x2b8/0x510 [ 495.407556][ T3658] ? hci_cc_le_set_random_addr+0x290/0x290 [ 495.413384][ T3658] hci_event_packet+0x63d/0xfd0 [ 495.418240][ T3658] ? hci_conn_drop+0x2f0/0x2f0 [ 495.423031][ T3658] ? hci_cs_create_conn+0x3a0/0x3a0 [ 495.428235][ T3658] ? kcov_remote_start+0x156/0x7a0 [ 495.433460][ T3658] hci_rx_work+0xae7/0x1230 [ 495.437982][ T3658] process_one_work+0x991/0x1610 [ 495.442938][ T3658] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 495.448323][ T3658] ? rwlock_bug.part.0+0x90/0x90 [ 495.453266][ T3658] ? _raw_spin_lock_irq+0x41/0x50 [ 495.458305][ T3658] worker_thread+0x665/0x1080 [ 495.463007][ T3658] ? process_one_work+0x1610/0x1610 [ 495.468218][ T3658] kthread+0x2e4/0x3a0 [ 495.472294][ T3658] ? kthread_complete_and_exit+0x40/0x40 [ 495.477940][ T3658] ret_from_fork+0x1f/0x30 [ 495.482378][ T3658] 03:58:06 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc9, "9b25b3", "2044e4", "0299cd", '|*b', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8}}}}, 0x20) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc9, "9b25b3", "2044e4", "0299cd", '|*b', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8}}}}, 0x20) (async) 03:58:06 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01"], 0x1d) [ 495.487517][ T3658] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 495.500999][ T3658] Bluetooth: hci5: failed to register connection device 03:58:07 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01eb09"], 0x1d) 03:58:07 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0xfffffffffffffd38) 03:58:07 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) pipe(&(0x7f0000000080)) fanotify_init(0x0, 0x101000) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400), 0xb0040, 0x0) splice(r5, 0x0, r1, 0x0, 0x500, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="7c8b2ccce5bab08f9518fbef5b6fbeffb7101ec5dfc7a656ded037a69de8e289aa3ff817bf2ca7d199a3359ddab0f308dd042ee7946bec0655fdaa8dc77c5bdba8614ff01d8dd2daa049d60b042e0c61031fd437b8948cc655769f5e313fd20440eedca7195383ae243c0dcb8717ad4db40056c90917e374ef2d5a5928826ac20688dcd025f9d115599037c47a061fd487f8c4c4878220cfe3fd5fb456c7b75656ad31dea7b6a7133b95f36e25ceca036d0e68f7f04ba51ef9f7783ea23e4e83513d2a8ffa75e58140598ab47703bb7874d69c18b1a4f3c874977bd88b42788a707f7f3af5905d1c8c3bd59d6c", 0xed}, {&(0x7f0000000380)="9f5807d63d5661b0787c58630116178595254f3e03a48d3f7dfcdc7ebed06d84fe796da222208574a315e43b403e794b22558e98e151aa9c55f8e1af96f48a58a3b707e8f4", 0x45}, {&(0x7f0000000400)}], 0x3) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRES16=r4], 0x10) pipe(&(0x7f0000000200)) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) pipe(&(0x7f0000000200)) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) (async) pipe(&(0x7f0000000200)) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) (async) pipe(&(0x7f0000000080)) (async) fanotify_init(0x0, 0x101000) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400), 0xb0040, 0x0) (async) splice(r5, 0x0, r1, 0x0, 0x500, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="7c8b2ccce5bab08f9518fbef5b6fbeffb7101ec5dfc7a656ded037a69de8e289aa3ff817bf2ca7d199a3359ddab0f308dd042ee7946bec0655fdaa8dc77c5bdba8614ff01d8dd2daa049d60b042e0c61031fd437b8948cc655769f5e313fd20440eedca7195383ae243c0dcb8717ad4db40056c90917e374ef2d5a5928826ac20688dcd025f9d115599037c47a061fd487f8c4c4878220cfe3fd5fb456c7b75656ad31dea7b6a7133b95f36e25ceca036d0e68f7f04ba51ef9f7783ea23e4e83513d2a8ffa75e58140598ab47703bb7874d69c18b1a4f3c874977bd88b42788a707f7f3af5905d1c8c3bd59d6c", 0xed}, {&(0x7f0000000380)="9f5807d63d5661b0787c58630116178595254f3e03a48d3f7dfcdc7ebed06d84fe796da222208574a315e43b403e794b22558e98e151aa9c55f8e1af96f48a58a3b707e8f4", 0x45}, {&(0x7f0000000400)}], 0x3) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRES16=r4], 0x10) (async) [ 495.560612][ T3658] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 495.615282][ T3658] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 495.633083][ T3658] CPU: 1 PID: 3658 Comm: kworker/u5:5 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 495.643273][ T3658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 495.653357][ T3658] Workqueue: hci5 hci_rx_work [ 495.658079][ T3658] Call Trace: [ 495.661379][ T3658] [ 495.664332][ T3658] dump_stack_lvl+0xcd/0x134 [ 495.668980][ T3658] sysfs_warn_dup.cold+0x1c/0x29 [ 495.673960][ T3658] sysfs_create_dir_ns+0x233/0x290 [ 495.679138][ T3658] ? sysfs_create_mount_point+0xb0/0xb0 [ 495.684719][ T3658] ? rwlock_bug.part.0+0x90/0x90 [ 495.686606][ T3662] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 495.689676][ T3658] ? do_raw_spin_unlock+0x171/0x230 [ 495.689718][ T3658] kobject_add_internal+0x2c9/0x8f0 [ 495.689750][ T3658] kobject_add+0x150/0x1c0 [ 495.689773][ T3658] ? kset_create_and_add+0x1a0/0x1a0 [ 495.689801][ T3658] ? lockdep_init_map_type+0x21a/0x7f0 [ 495.689830][ T3658] ? __raw_spin_lock_init+0x36/0x110 [ 495.689864][ T3658] device_add+0x368/0x1e90 [ 495.689891][ T3658] ? dev_set_name+0xbb/0xf0 [ 495.689914][ T3658] ? device_initialize+0x540/0x540 [ 495.689937][ T3658] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 495.689964][ T3658] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 495.754772][ T3658] ? lock_downgrade+0x6e0/0x6e0 [ 495.759646][ T3658] ? hci_event_packet+0x425/0xfd0 [ 495.764689][ T3658] hci_conn_add_sysfs+0x9b/0x1b0 [ 495.769632][ T3658] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 495.775628][ T3658] ? hci_cc_le_set_random_addr+0x290/0x290 [ 495.781453][ T3658] ? wait_for_completion_io_timeout+0x20/0x20 [ 495.787545][ T3658] hci_le_meta_evt+0x2b8/0x510 [ 495.792402][ T3658] ? hci_cc_le_set_random_addr+0x290/0x290 [ 495.798240][ T3658] hci_event_packet+0x63d/0xfd0 [ 495.803114][ T3658] ? hci_conn_drop+0x2f0/0x2f0 [ 495.808325][ T3658] ? hci_cs_create_conn+0x3a0/0x3a0 [ 495.813538][ T3658] ? kcov_remote_start+0x156/0x7a0 [ 495.818679][ T3658] hci_rx_work+0xae7/0x1230 [ 495.823209][ T3658] process_one_work+0x991/0x1610 [ 495.828172][ T3658] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 495.833583][ T3658] ? rwlock_bug.part.0+0x90/0x90 [ 495.838528][ T3658] ? _raw_spin_lock_irq+0x41/0x50 [ 495.843571][ T3658] worker_thread+0x665/0x1080 [ 495.848273][ T3658] ? process_one_work+0x1610/0x1610 [ 495.853502][ T3658] kthread+0x2e4/0x3a0 [ 495.857668][ T3658] ? kthread_complete_and_exit+0x40/0x40 [ 495.863312][ T3658] ret_from_fork+0x1f/0x30 [ 495.867755][ T3658] [ 495.873184][ T3658] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 495.886733][ T3658] Bluetooth: hci5: failed to register connection device [ 495.893944][ T3658] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 495.903713][ T3658] CPU: 1 PID: 3658 Comm: kworker/u5:5 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 495.913892][ T3658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 495.923976][ T3658] Workqueue: hci5 hci_rx_work [ 495.928687][ T3658] Call Trace: [ 495.931979][ T3658] [ 495.934931][ T3658] dump_stack_lvl+0xcd/0x134 [ 495.939556][ T3658] sysfs_warn_dup.cold+0x1c/0x29 [ 495.944515][ T3658] sysfs_create_dir_ns+0x233/0x290 [ 495.949638][ T3658] ? sysfs_create_mount_point+0xb0/0xb0 [ 495.955471][ T3658] ? rwlock_bug.part.0+0x90/0x90 [ 495.960445][ T3658] ? do_raw_spin_unlock+0x171/0x230 [ 495.965665][ T3658] kobject_add_internal+0x2c9/0x8f0 [ 495.970884][ T3658] kobject_add+0x150/0x1c0 [ 495.975318][ T3658] ? kset_create_and_add+0x1a0/0x1a0 [ 495.980628][ T3658] ? lockdep_init_map_type+0x21a/0x7f0 [ 495.986110][ T3658] ? __raw_spin_lock_init+0x36/0x110 [ 495.991405][ T3658] device_add+0x368/0x1e90 [ 495.995829][ T3658] ? dev_set_name+0xbb/0xf0 [ 496.000357][ T3658] ? device_initialize+0x540/0x540 [ 496.005480][ T3658] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 496.011736][ T3658] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 496.017728][ T3658] ? lock_downgrade+0x6e0/0x6e0 [ 496.022580][ T3658] ? hci_event_packet+0x425/0xfd0 [ 496.027623][ T3658] hci_conn_add_sysfs+0x9b/0x1b0 [ 496.032566][ T3658] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 496.038398][ T3658] ? hci_cc_le_set_random_addr+0x290/0x290 [ 496.044212][ T3658] ? wait_for_completion_io_timeout+0x20/0x20 [ 496.050305][ T3658] hci_le_meta_evt+0x2b8/0x510 [ 496.055076][ T3658] ? hci_cc_le_set_random_addr+0x290/0x290 [ 496.060899][ T3658] hci_event_packet+0x63d/0xfd0 [ 496.065756][ T3658] ? hci_conn_drop+0x2f0/0x2f0 [ 496.070546][ T3658] ? hci_cs_create_conn+0x3a0/0x3a0 [ 496.075745][ T3658] ? kcov_remote_start+0x156/0x7a0 [ 496.080882][ T3658] hci_rx_work+0xae7/0x1230 [ 496.085400][ T3658] process_one_work+0x991/0x1610 [ 496.090352][ T3658] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 496.095738][ T3658] ? rwlock_bug.part.0+0x90/0x90 [ 496.100688][ T3658] ? _raw_spin_lock_irq+0x41/0x50 [ 496.105722][ T3658] worker_thread+0x665/0x1080 [ 496.110434][ T3658] ? process_one_work+0x1610/0x1610 [ 496.115650][ T3658] kthread+0x2e4/0x3a0 [ 496.119721][ T3658] ? kthread_complete_and_exit+0x40/0x40 [ 496.125361][ T3658] ret_from_fork+0x1f/0x30 [ 496.129798][ T3658] [ 496.137990][ T3658] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 496.151369][ T3658] Bluetooth: hci5: failed to register connection device 03:58:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x100000000000000) 03:58:07 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01eb"], 0x1d) 03:58:07 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0xfffffffffffffd38) 03:58:07 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc9, "9b25b3", "2044e4", "0299cd", '|*b', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8}}}}, 0x20) 03:58:07 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) (async) pipe(&(0x7f0000000080)) (async) fanotify_init(0x0, 0x101000) (async) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400), 0xb0040, 0x0) splice(r5, 0x0, r1, 0x0, 0x500, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="7c8b2ccce5bab08f9518fbef5b6fbeffb7101ec5dfc7a656ded037a69de8e289aa3ff817bf2ca7d199a3359ddab0f308dd042ee7946bec0655fdaa8dc77c5bdba8614ff01d8dd2daa049d60b042e0c61031fd437b8948cc655769f5e313fd20440eedca7195383ae243c0dcb8717ad4db40056c90917e374ef2d5a5928826ac20688dcd025f9d115599037c47a061fd487f8c4c4878220cfe3fd5fb456c7b75656ad31dea7b6a7133b95f36e25ceca036d0e68f7f04ba51ef9f7783ea23e4e83513d2a8ffa75e58140598ab47703bb7874d69c18b1a4f3c874977bd88b42788a707f7f3af5905d1c8c3bd59d6c", 0xed}, {&(0x7f0000000380)="9f5807d63d5661b0787c58630116178595254f3e03a48d3f7dfcdc7ebed06d84fe796da222208574a315e43b403e794b22558e98e151aa9c55f8e1af96f48a58a3b707e8f4", 0x45}, {&(0x7f0000000400)}], 0x3) (async, rerun: 32) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRES16=r4], 0x10) (rerun: 32) 03:58:07 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xa751]}, 0x8, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10080, 0x98) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000480)={[{0x8000, 0x3, 0xff, 0x20, 0x81, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x63}, {0x100, 0xf, 0x7, 0xff, 0x1, 0x9, 0xb1, 0x1, 0x1f, 0x99, 0x1, 0x1, 0x81}, {0x1, 0x40, 0xff, 0x2, 0x0, 0x10, 0x3, 0x3f, 0x0, 0x1f, 0x0, 0x3, 0x10001}], 0x26e6f69}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0x500, 0x0) r8 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r10 = syz_open_dev$vcsu(&(0x7f0000000340), 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=@raw=[@initr0, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000140)='GPL\x00', 0xff, 0x43, &(0x7f0000000180)=""/67, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0xd8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0, r1, r4, 0xffffffffffffffff, r7, r8, r9, r10, 0xffffffffffffffff]}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000400)="fb", 0x1) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x4, &(0x7f0000000940)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x0, r3, &(0x7f0000000540)="d88219890b7605361af42c2719fde6eb251a10f5a2326f07fdfea9a88f606d266eda4d4b1171dbe7a08710b53ec46e65f7276e70714a432ced97d3ad1eee6fd4cd3b330b1b2db9818280a42da20066f749cd45ba94b0d62c81e7a070b6ecfde032b8755497f9ffd78febf543e0028d24fc6e617ad88da566f2b77dd26d268c0c84e6569ab6c3e3367dd4165f743471f62b53a976f1ee98c5231056c04726bb2eca4e7383763890e94c0580a9969411374b30418c57d66e0eab93d9642bd63dc79fed7405aeed107d80a1a73d82665de0ee61f41d01f3809d", 0xd8, 0x80000000, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000680)="b1094f15ad347bb829988218b84542d8dd49e95aff62be38d8281363384d7f35353afcd5e9d41e5f7bd1060d30e69cc68b784da47201071d52e32e7ce6498aa434f2322881f0d74c53620d516bafcc642d72d0be136085deaeacb7cfbba0f0e77f61b885430e968a4889bb33ea74844350fada252aac2d5a7ab11a2b52674a50efc8695abc89e754492439be4adb53ccba1991", 0x93, 0x1, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x110, r11, &(0x7f0000000780)="62b688dcdd6786895ed28b62e3dfd63fb21db5f43f54da9fbe4ac2952950fe2c88505c7911eb2c5cd169ec", 0x2b, 0xffffffffffffff25, 0x0, 0x1, r12}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x2, r13, &(0x7f0000000880)="5d611c4646cf81cfe9047cdf5e7b828d8975a883551409441b2ae57a84076dc9370fce96d9eb2ab2549c99bd6d98025e914070a8a956200894c084c80d62c168e538bc54230e16fa76d67aa94543922498e505985c3e68bac02d33f93c2b5f3c60d1", 0x62, 0xfffffffffffffff7, 0x0, 0x1, r10}]) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xa751]}, 0x8, 0x800) (async) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) (async) pipe(&(0x7f0000000200)) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10080, 0x98) (async) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000480)={[{0x8000, 0x3, 0xff, 0x20, 0x81, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x63}, {0x100, 0xf, 0x7, 0xff, 0x1, 0x9, 0xb1, 0x1, 0x1f, 0x99, 0x1, 0x1, 0x81}, {0x1, 0x40, 0xff, 0x2, 0x0, 0x10, 0x3, 0x3f, 0x0, 0x1f, 0x0, 0x3, 0x10001}], 0x26e6f69}) (async) pipe(&(0x7f0000000080)) (async) splice(r7, 0x0, r5, 0x0, 0x500, 0x0) (async) syz_io_uring_complete(0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_open_dev$vcsu(&(0x7f0000000340), 0x0, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=@raw=[@initr0, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000140)='GPL\x00', 0xff, 0x43, &(0x7f0000000180)=""/67, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0xd8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0, r1, r4, 0xffffffffffffffff, r7, r8, r9, r10, 0xffffffffffffffff]}, 0x80) (async) pipe(&(0x7f0000000080)) (async) write(r11, &(0x7f0000000400)="fb", 0x1) (async) pipe(&(0x7f00000007c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)) (async) io_submit(0x0, 0x4, &(0x7f0000000940)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x0, r3, &(0x7f0000000540)="d88219890b7605361af42c2719fde6eb251a10f5a2326f07fdfea9a88f606d266eda4d4b1171dbe7a08710b53ec46e65f7276e70714a432ced97d3ad1eee6fd4cd3b330b1b2db9818280a42da20066f749cd45ba94b0d62c81e7a070b6ecfde032b8755497f9ffd78febf543e0028d24fc6e617ad88da566f2b77dd26d268c0c84e6569ab6c3e3367dd4165f743471f62b53a976f1ee98c5231056c04726bb2eca4e7383763890e94c0580a9969411374b30418c57d66e0eab93d9642bd63dc79fed7405aeed107d80a1a73d82665de0ee61f41d01f3809d", 0xd8, 0x80000000, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000680)="b1094f15ad347bb829988218b84542d8dd49e95aff62be38d8281363384d7f35353afcd5e9d41e5f7bd1060d30e69cc68b784da47201071d52e32e7ce6498aa434f2322881f0d74c53620d516bafcc642d72d0be136085deaeacb7cfbba0f0e77f61b885430e968a4889bb33ea74844350fada252aac2d5a7ab11a2b52674a50efc8695abc89e754492439be4adb53ccba1991", 0x93, 0x1, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x110, r11, &(0x7f0000000780)="62b688dcdd6786895ed28b62e3dfd63fb21db5f43f54da9fbe4ac2952950fe2c88505c7911eb2c5cd169ec", 0x2b, 0xffffffffffffff25, 0x0, 0x1, r12}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x2, r13, &(0x7f0000000880)="5d611c4646cf81cfe9047cdf5e7b828d8975a883551409441b2ae57a84076dc9370fce96d9eb2ab2549c99bd6d98025e914070a8a956200894c084c80d62c168e538bc54230e16fa76d67aa94543922498e505985c3e68bac02d33f93c2b5f3c60d1", 0x62, 0xfffffffffffffff7, 0x0, 0x1, r10}]) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) [ 496.221547][ T3658] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 496.231136][ T3658] CPU: 1 PID: 3658 Comm: kworker/u5:5 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 496.241317][ T3658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 496.251389][ T3658] Workqueue: hci5 hci_rx_work [ 496.256087][ T3658] Call Trace: [ 496.259361][ T3658] [ 496.262294][ T3658] dump_stack_lvl+0xcd/0x134 [ 496.266896][ T3658] sysfs_warn_dup.cold+0x1c/0x29 [ 496.271844][ T3658] sysfs_create_dir_ns+0x233/0x290 [ 496.277136][ T3658] ? sysfs_create_mount_point+0xb0/0xb0 [ 496.282696][ T3658] ? rwlock_bug.part.0+0x90/0x90 [ 496.287642][ T3658] ? do_raw_spin_unlock+0x171/0x230 [ 496.292847][ T3658] kobject_add_internal+0x2c9/0x8f0 [ 496.298060][ T3658] kobject_add+0x150/0x1c0 [ 496.302479][ T3658] ? kset_create_and_add+0x1a0/0x1a0 [ 496.307775][ T3658] ? lockdep_init_map_type+0x21a/0x7f0 [ 496.313243][ T3658] ? __raw_spin_lock_init+0x36/0x110 [ 496.318539][ T3658] device_add+0x368/0x1e90 [ 496.322963][ T3658] ? dev_set_name+0xbb/0xf0 [ 496.327483][ T3658] ? device_initialize+0x540/0x540 [ 496.332603][ T3658] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 496.338849][ T3658] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 496.344836][ T3658] ? lock_downgrade+0x6e0/0x6e0 [ 496.349702][ T3658] ? hci_event_packet+0x425/0xfd0 [ 496.354736][ T3658] hci_conn_add_sysfs+0x9b/0x1b0 [ 496.359676][ T3658] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 496.365489][ T3658] ? hci_cc_le_set_random_addr+0x290/0x290 [ 496.371306][ T3658] ? wait_for_completion_io_timeout+0x20/0x20 [ 496.377471][ T3658] hci_le_meta_evt+0x2b8/0x510 [ 496.382243][ T3658] ? hci_cc_le_set_random_addr+0x290/0x290 [ 496.388062][ T3658] hci_event_packet+0x63d/0xfd0 [ 496.392914][ T3658] ? hci_conn_drop+0x2f0/0x2f0 [ 496.397680][ T3658] ? hci_cs_create_conn+0x3a0/0x3a0 [ 496.402892][ T3658] ? kcov_remote_start+0x156/0x7a0 [ 496.408023][ T3658] hci_rx_work+0xae7/0x1230 [ 496.412537][ T3658] process_one_work+0x991/0x1610 [ 496.417494][ T3658] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 496.422875][ T3658] ? rwlock_bug.part.0+0x90/0x90 [ 496.427825][ T3658] ? _raw_spin_lock_irq+0x41/0x50 [ 496.432860][ T3658] worker_thread+0x665/0x1080 [ 496.437552][ T3658] ? process_one_work+0x1610/0x1610 [ 496.442758][ T3658] kthread+0x2e4/0x3a0 [ 496.446826][ T3658] ? kthread_complete_and_exit+0x40/0x40 [ 496.452467][ T3658] ret_from_fork+0x1f/0x30 [ 496.456907][ T3658] 03:58:07 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01"], 0x1d) 03:58:07 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0xfffffffffffffd38) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0xfffffffffffffd38) (async) 03:58:07 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01"], 0x1d) [ 496.462309][ T3658] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 496.475636][ T3658] Bluetooth: hci5: failed to register connection device 03:58:07 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x20) 03:58:08 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaff01aa0000"], 0x1d) 03:58:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x5, 0x680f, 0x3, 0x100000000}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) 03:58:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x400000000000000) 03:58:08 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01"], 0x1d) 03:58:08 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xa751]}, 0x8, 0x800) (async, rerun: 64) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x500, 0x0) (async, rerun: 32) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) (async, rerun: 32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10080, 0x98) (rerun: 64) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000480)={[{0x8000, 0x3, 0xff, 0x20, 0x81, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x63}, {0x100, 0xf, 0x7, 0xff, 0x1, 0x9, 0xb1, 0x1, 0x1f, 0x99, 0x1, 0x1, 0x81}, {0x1, 0x40, 0xff, 0x2, 0x0, 0x10, 0x3, 0x3f, 0x0, 0x1f, 0x0, 0x3, 0x10001}], 0x26e6f69}) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (rerun: 64) splice(r7, 0x0, r5, 0x0, 0x500, 0x0) r8 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r10 = syz_open_dev$vcsu(&(0x7f0000000340), 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=@raw=[@initr0, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000140)='GPL\x00', 0xff, 0x43, &(0x7f0000000180)=""/67, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0xd8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0, r1, r4, 0xffffffffffffffff, r7, r8, r9, r10, 0xffffffffffffffff]}, 0x80) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000400)="fb", 0x1) (async, rerun: 32) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x4, &(0x7f0000000940)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x0, r3, &(0x7f0000000540)="d88219890b7605361af42c2719fde6eb251a10f5a2326f07fdfea9a88f606d266eda4d4b1171dbe7a08710b53ec46e65f7276e70714a432ced97d3ad1eee6fd4cd3b330b1b2db9818280a42da20066f749cd45ba94b0d62c81e7a070b6ecfde032b8755497f9ffd78febf543e0028d24fc6e617ad88da566f2b77dd26d268c0c84e6569ab6c3e3367dd4165f743471f62b53a976f1ee98c5231056c04726bb2eca4e7383763890e94c0580a9969411374b30418c57d66e0eab93d9642bd63dc79fed7405aeed107d80a1a73d82665de0ee61f41d01f3809d", 0xd8, 0x80000000, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000680)="b1094f15ad347bb829988218b84542d8dd49e95aff62be38d8281363384d7f35353afcd5e9d41e5f7bd1060d30e69cc68b784da47201071d52e32e7ce6498aa434f2322881f0d74c53620d516bafcc642d72d0be136085deaeacb7cfbba0f0e77f61b885430e968a4889bb33ea74844350fada252aac2d5a7ab11a2b52674a50efc8695abc89e754492439be4adb53ccba1991", 0x93, 0x1, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x110, r11, &(0x7f0000000780)="62b688dcdd6786895ed28b62e3dfd63fb21db5f43f54da9fbe4ac2952950fe2c88505c7911eb2c5cd169ec", 0x2b, 0xffffffffffffff25, 0x0, 0x1, r12}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x2, r13, &(0x7f0000000880)="5d611c4646cf81cfe9047cdf5e7b828d8975a883551409441b2ae57a84076dc9370fce96d9eb2ab2549c99bd6d98025e914070a8a956200894c084c80d62c168e538bc54230e16fa76d67aa94543922498e505985c3e68bac02d33f93c2b5f3c60d1", 0x62, 0xfffffffffffffff7, 0x0, 0x1, r10}]) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:58:08 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaff01aa0000"], 0x1d) 03:58:08 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x20) 03:58:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x5, 0x680f, 0x3, 0x100000000}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) [ 496.687413][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x100000000000000) 03:58:08 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x20) 03:58:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x5, 0x680f, 0x3, 0x100000000}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) 03:58:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x4c}, @l2cap_cid_signaling={{0x48}, [@l2cap_create_chan_req={{0xc, 0x40, 0x5}, {0x6, 0x3ff}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x55, 0x800}}, @l2cap_conn_rsp={{0x3, 0x70, 0x8}, {0x1002, 0x2, 0x6315, 0x61d4}}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}, {0x1f}}, @l2cap_info_rsp={{0xb, 0xb0, 0x21}, {0x329a, 0x3f, "aa4197c7f8427cd80bdcbc064ac4d8d11590d7e4b84745260b8fab18aa"}}]}}, 0x51) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xd7) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "92f30e910a862e79dfc23afc45cb9018018476898f52bcbae996d2108157219d87b4ba9665bc039e58597025cb464c069ddf474c393dd074ce6c12f3363530a97575c15d59aff8b28e98c3c0a65328867269a044b31e23c79f95dfb3de4c0473b1d94efa9cf32bc35a3e0ba4f821153b8c59c1058bfd249965a4e3dcbe614b88e3076e2d699c3d7057783bc55f35eed06d2d54583ce89ad906f80585292646d457d3b49e8fa9ca44913019b7392a1d6545c3af7623ca304b74201b0520c5d2522ed9d93026862ab7fb937920d0949cf769f353a66e5ef0e7a334e541f1dd831bf2e4ca581d3b985037eb6099c3d9ee11cbccc542ea7d9c05"}}}, 0x102) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:58:08 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x12e}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0x114, "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"}]}}}}, 0x131) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x9, 0x4}, {0x401, 0x3}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xfd}, @l2cap_cid_signaling={{0xf9}, [@l2cap_disconn_req={{0x6, 0x7, 0x4}, {0xff1a, 0xff}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x3, 0x40}}, @l2cap_info_rsp={{0xb, 0x7f, 0x36}, {0x3, 0x60b, "1cf15be2f7d2a9a3fae27f38feaeb3c71680ba5100a5ac16b08ddf4ef5b36c6d78382f23285dd000bdb95c37ae27daf8d497"}}, @l2cap_conn_req={{0x2, 0xe2, 0x4}, {0x9, 0x1}}, @l2cap_info_rsp={{0xb, 0x5, 0x82}, {0x200, 0x8001, "33be11caed0fad3981d533b4e27a85d2b5d5a89ba682b2b75b5912c74e3c24fa5ed12a4e01470d83a1b196ffb4e34cbccf95e5b5509afbcbf3ad09079eefd0fb5384a8f4fa1ac4ba4ed47b0082331ad6de558bb2805dea0f66b6c7d37faf46ba45c5d1f2ecedf180662f66acf97a1398c4ecab7d6d03730bb2c8ac7bfa3d"}}, @l2cap_conf_rsp={{0x5, 0x2, 0x15}, {0x1, 0x6, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0x1000}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_cfm={{0x10, 0x80, 0x4}, {0x30, 0x55}}]}}, 0x102) [ 496.774176][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:08 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaff01aa0000"], 0x1d) [ 496.863384][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x700000000000000) 03:58:08 executing program 1: getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[], &(0x7f0000000240)=""/94, 0x80) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="00e3ff006a9fc56e949103c3ade8312a84aefd4433c5c71653a3a3acc09c2b60ebd1f2eae5220b326cd05289d4f77f18e1d3be24a391f247ec01405e90dba20ed7c430c2d772f4aebd7878078e1b3a5b2743bed630d4034a4743e5c959484bf454423f864be74de633f13b6c7715f37c46c31ead90f2"], 0x10) 03:58:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x4c}, @l2cap_cid_signaling={{0x48}, [@l2cap_create_chan_req={{0xc, 0x40, 0x5}, {0x6, 0x3ff}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x55, 0x800}}, @l2cap_conn_rsp={{0x3, 0x70, 0x8}, {0x1002, 0x2, 0x6315, 0x61d4}}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}, {0x1f}}, @l2cap_info_rsp={{0xb, 0xb0, 0x21}, {0x329a, 0x3f, "aa4197c7f8427cd80bdcbc064ac4d8d11590d7e4b84745260b8fab18aa"}}]}}, 0x51) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xd7) (async) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "92f30e910a862e79dfc23afc45cb9018018476898f52bcbae996d2108157219d87b4ba9665bc039e58597025cb464c069ddf474c393dd074ce6c12f3363530a97575c15d59aff8b28e98c3c0a65328867269a044b31e23c79f95dfb3de4c0473b1d94efa9cf32bc35a3e0ba4f821153b8c59c1058bfd249965a4e3dcbe614b88e3076e2d699c3d7057783bc55f35eed06d2d54583ce89ad906f80585292646d457d3b49e8fa9ca44913019b7392a1d6545c3af7623ca304b74201b0520c5d2522ed9d93026862ab7fb937920d0949cf769f353a66e5ef0e7a334e541f1dd831bf2e4ca581d3b985037eb6099c3d9ee11cbccc542ea7d9c05"}}}, 0x102) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:58:08 executing program 5: syslog(0x2, &(0x7f0000000080)=""/220, 0xdc) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x20a101, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "1cfc61", 0x2}}}, 0xd) 03:58:08 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x12e}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0x114, "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"}]}}}}, 0x131) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x9, 0x4}, {0x401, 0x3}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xfd}, @l2cap_cid_signaling={{0xf9}, [@l2cap_disconn_req={{0x6, 0x7, 0x4}, {0xff1a, 0xff}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x3, 0x40}}, @l2cap_info_rsp={{0xb, 0x7f, 0x36}, {0x3, 0x60b, "1cf15be2f7d2a9a3fae27f38feaeb3c71680ba5100a5ac16b08ddf4ef5b36c6d78382f23285dd000bdb95c37ae27daf8d497"}}, @l2cap_conn_req={{0x2, 0xe2, 0x4}, {0x9, 0x1}}, @l2cap_info_rsp={{0xb, 0x5, 0x82}, {0x200, 0x8001, "33be11caed0fad3981d533b4e27a85d2b5d5a89ba682b2b75b5912c74e3c24fa5ed12a4e01470d83a1b196ffb4e34cbccf95e5b5509afbcbf3ad09079eefd0fb5384a8f4fa1ac4ba4ed47b0082331ad6de558bb2805dea0f66b6c7d37faf46ba45c5d1f2ecedf180662f66acf97a1398c4ecab7d6d03730bb2c8ac7bfa3d"}}, @l2cap_conf_rsp={{0x5, 0x2, 0x15}, {0x1, 0x6, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0x1000}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_cfm={{0x10, 0x80, 0x4}, {0x30, 0x55}}]}}, 0x102) 03:58:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x40030000000000) 03:58:08 executing program 5: syslog(0x2, &(0x7f0000000080)=""/220, 0xdc) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x20a101, 0x0) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none}]}}}}, 0x1d) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "1cfc61", 0x2}}}, 0xd) (rerun: 32) 03:58:08 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x12e}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0x114, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d963b4d872161630a7a6cf27fe803d6fb7aa3b6e23422a47dd386e569e7e79ddb2034e934ef3d847998dbfb3693b136fa263e215a89f30561ca724ab6ae37ff9dc00d93a9cf8a044086a03d3f076061c9182c8473702d54778aede372ef1646837e401c4499"}]}}}}, 0x131) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x9, 0x4}, {0x401, 0x3}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xfd}, @l2cap_cid_signaling={{0xf9}, [@l2cap_disconn_req={{0x6, 0x7, 0x4}, {0xff1a, 0xff}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x3, 0x40}}, @l2cap_info_rsp={{0xb, 0x7f, 0x36}, {0x3, 0x60b, "1cf15be2f7d2a9a3fae27f38feaeb3c71680ba5100a5ac16b08ddf4ef5b36c6d78382f23285dd000bdb95c37ae27daf8d497"}}, @l2cap_conn_req={{0x2, 0xe2, 0x4}, {0x9, 0x1}}, @l2cap_info_rsp={{0xb, 0x5, 0x82}, {0x200, 0x8001, "33be11caed0fad3981d533b4e27a85d2b5d5a89ba682b2b75b5912c74e3c24fa5ed12a4e01470d83a1b196ffb4e34cbccf95e5b5509afbcbf3ad09079eefd0fb5384a8f4fa1ac4ba4ed47b0082331ad6de558bb2805dea0f66b6c7d37faf46ba45c5d1f2ecedf180662f66acf97a1398c4ecab7d6d03730bb2c8ac7bfa3d"}}, @l2cap_conf_rsp={{0x5, 0x2, 0x15}, {0x1, 0x6, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0x1000}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_cfm={{0x10, 0x80, 0x4}, {0x30, 0x55}}]}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x12e}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0x114, "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"}]}}}}, 0x131) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x9, 0x4}, {0x401, 0x3}}]}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xfd}, @l2cap_cid_signaling={{0xf9}, [@l2cap_disconn_req={{0x6, 0x7, 0x4}, {0xff1a, 0xff}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x3, 0x40}}, @l2cap_info_rsp={{0xb, 0x7f, 0x36}, {0x3, 0x60b, "1cf15be2f7d2a9a3fae27f38feaeb3c71680ba5100a5ac16b08ddf4ef5b36c6d78382f23285dd000bdb95c37ae27daf8d497"}}, @l2cap_conn_req={{0x2, 0xe2, 0x4}, {0x9, 0x1}}, @l2cap_info_rsp={{0xb, 0x5, 0x82}, {0x200, 0x8001, "33be11caed0fad3981d533b4e27a85d2b5d5a89ba682b2b75b5912c74e3c24fa5ed12a4e01470d83a1b196ffb4e34cbccf95e5b5509afbcbf3ad09079eefd0fb5384a8f4fa1ac4ba4ed47b0082331ad6de558bb2805dea0f66b6c7d37faf46ba45c5d1f2ecedf180662f66acf97a1398c4ecab7d6d03730bb2c8ac7bfa3d"}}, @l2cap_conf_rsp={{0x5, 0x2, 0x15}, {0x1, 0x6, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0x1000}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_cfm={{0x10, 0x80, 0x4}, {0x30, 0x55}}]}}, 0x102) (async) 03:58:08 executing program 1: getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[], &(0x7f0000000240)=""/94, 0x80) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="00e3ff006a9fc56e949103c3ade8312a84aefd4433c5c71653a3a3acc09c2b60ebd1f2eae5220b326cd05289d4f77f18e1d3be24a391f247ec01405e90dba20ed7c430c2d772f4aebd7878078e1b3a5b2743bed630d4034a4743e5c959484bf454423f864be74de633f13b6c7715f37c46c31ead90f2"], 0x10) 03:58:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x4c}, @l2cap_cid_signaling={{0x48}, [@l2cap_create_chan_req={{0xc, 0x40, 0x5}, {0x6, 0x3ff}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x55, 0x800}}, @l2cap_conn_rsp={{0x3, 0x70, 0x8}, {0x1002, 0x2, 0x6315, 0x61d4}}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}, {0x1f}}, @l2cap_info_rsp={{0xb, 0xb0, 0x21}, {0x329a, 0x3f, "aa4197c7f8427cd80bdcbc064ac4d8d11590d7e4b84745260b8fab18aa"}}]}}, 0x51) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xd7) (async) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "92f30e910a862e79dfc23afc45cb9018018476898f52bcbae996d2108157219d87b4ba9665bc039e58597025cb464c069ddf474c393dd074ce6c12f3363530a97575c15d59aff8b28e98c3c0a65328867269a044b31e23c79f95dfb3de4c0473b1d94efa9cf32bc35a3e0ba4f821153b8c59c1058bfd249965a4e3dcbe614b88e3076e2d699c3d7057783bc55f35eed06d2d54583ce89ad906f80585292646d457d3b49e8fa9ca44913019b7392a1d6545c3af7623ca304b74201b0520c5d2522ed9d93026862ab7fb937920d0949cf769f353a66e5ef0e7a334e541f1dd831bf2e4ca581d3b985037eb6099c3d9ee11cbccc542ea7d9c05"}}}, 0x102) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:58:08 executing program 5: syslog(0x2, &(0x7f0000000080)=""/220, 0xdc) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x20a101, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "1cfc61", 0x2}}}, 0xd) syslog(0x2, &(0x7f0000000080)=""/220, 0xdc) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x20a101, 0x0) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "1cfc61", 0x2}}}, 0xd) (async) 03:58:08 executing program 1: getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[], &(0x7f0000000240)=""/94, 0x80) (async, rerun: 32) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="00e3ff006a9fc56e949103c3ade8312a84aefd4433c5c71653a3a3acc09c2b60ebd1f2eae5220b326cd05289d4f77f18e1d3be24a391f247ec01405e90dba20ed7c430c2d772f4aebd7878078e1b3a5b2743bed630d4034a4743e5c959484bf454423f864be74de633f13b6c7715f37c46c31ead90f2"], 0x10) 03:58:08 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x1, 0xe}, {0x3, 0x5d9d, 0x15f, 0x6, [0x8, 0x1, 0xaf0b]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9}, "76ef04df7e0fce6d2676fdf6032a28eb280d689938a7b88f9001fe79bff30ce4932880343fc5cee1fec386e411d7a0e645c647c6972e6c8c0751b5efbaed8f"}, 0xffffffffffffff6c) 03:58:08 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x81, 0x4, 0x8, 0x8, 0x0, 0x40, 0x6, 0xffffffffffffffff, 0x7000000000000, 0x8000000000000000, 0x40, 0x1d2cc92c, 0x9, 0xb8c8, 0xffffffff7fffffff]}, &(0x7f0000000140)=0x100) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x500, 0x0) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x84) 03:58:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x1000000000000000) 03:58:08 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xffff, 0x1e3a000) 03:58:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x4}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="5307d03d"], 0x10) 03:58:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x400000000000000) 03:58:08 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x1, 0xe}, {0x3, 0x5d9d, 0x15f, 0x6, [0x8, 0x1, 0xaf0b]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9}, "76ef04df7e0fce6d2676fdf6032a28eb280d689938a7b88f9001fe79bff30ce4932880343fc5cee1fec386e411d7a0e645c647c6972e6c8c0751b5efbaed8f"}, 0xffffffffffffff6c) 03:58:08 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xffff, 0x1e3a000) 03:58:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x4}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="5307d03d"], 0x10) 03:58:08 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x1, 0xe}, {0x3, 0x5d9d, 0x15f, 0x6, [0x8, 0x1, 0xaf0b]}}}}, 0x1b) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9}, "76ef04df7e0fce6d2676fdf6032a28eb280d689938a7b88f9001fe79bff30ce4932880343fc5cee1fec386e411d7a0e645c647c6972e6c8c0751b5efbaed8f"}, 0xffffffffffffff6c) 03:58:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x4}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="5307d03d"], 0x10) 03:58:09 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xffff, 0x1e3a000) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xffff, 0x1e3a000) (async) 03:58:09 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x0, 0xc9, 0x5, 0x8, 0x20, 0xef}}}, 0xe) 03:58:09 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x81, 0x4, 0x8, 0x8, 0x0, 0x40, 0x6, 0xffffffffffffffff, 0x7000000000000, 0x8000000000000000, 0x40, 0x1d2cc92c, 0x9, 0xb8c8, 0xffffffff7fffffff]}, &(0x7f0000000140)=0x100) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x500, 0x0) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x81, 0x4, 0x8, 0x8, 0x0, 0x40, 0x6, 0xffffffffffffffff, 0x7000000000000, 0x8000000000000000, 0x40, 0x1d2cc92c, 0x9, 0xb8c8, 0xffffffff7fffffff]}, &(0x7f0000000140)=0x100) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) (async) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r4, 0x0, r3, 0x0, 0x500, 0x0) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x84) (async) 03:58:09 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x2}, '~%'}}, 0x5) 03:58:09 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0xd}, {0x3, [{0xc8, 0x401}, {0xc9, 0xe3be}, {0xc8, 0xffc1}]}}}, 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x6d}, "d6775cacadc5357288d1289894fa4817020ba0c8a4de5201efa5cc80f08839fffc00c840fb123bd03122085385248721d08ff368a20c31e2435b310480a9fd05b876c3084ca43393f3f087c8316179704109814ba5873d1afed480e99aa9cc94bde5c98fa2f40129349b3fa831"}, 0x71) 03:58:09 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x0, 0xc9, 0x5, 0x8, 0x20, 0xef}}}, 0xe) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x0, 0xc9, 0x5, 0x8, 0x20, 0xef}}}, 0xe) (async) 03:58:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x1100000000000000) 03:58:09 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x1000000000000000) 03:58:09 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0xd}, {0x3, [{0xc8, 0x401}, {0xc9, 0xe3be}, {0xc8, 0xffc1}]}}}, 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x6d}, "d6775cacadc5357288d1289894fa4817020ba0c8a4de5201efa5cc80f08839fffc00c840fb123bd03122085385248721d08ff368a20c31e2435b310480a9fd05b876c3084ca43393f3f087c8316179704109814ba5873d1afed480e99aa9cc94bde5c98fa2f40129349b3fa831"}, 0x71) 03:58:09 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x2}, '~%'}}, 0x5) 03:58:09 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x0, 0xc9, 0x5, 0x8, 0x20, 0xef}}}, 0xe) 03:58:09 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0xd}, {0x3, [{0xc8, 0x401}, {0xc9, 0xe3be}, {0xc8, 0xffc1}]}}}, 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x6d}, "d6775cacadc5357288d1289894fa4817020ba0c8a4de5201efa5cc80f08839fffc00c840fb123bd03122085385248721d08ff368a20c31e2435b310480a9fd05b876c3084ca43393f3f087c8316179704109814ba5873d1afed480e99aa9cc94bde5c98fa2f40129349b3fa831"}, 0x71) 03:58:09 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x81, 0x4, 0x8, 0x8, 0x0, 0x40, 0x6, 0xffffffffffffffff, 0x7000000000000, 0x8000000000000000, 0x40, 0x1d2cc92c, 0x9, 0xb8c8, 0xffffffff7fffffff]}, &(0x7f0000000140)=0x100) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x500, 0x0) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x81, 0x4, 0x8, 0x8, 0x0, 0x40, 0x6, 0xffffffffffffffff, 0x7000000000000, 0x8000000000000000, 0x40, 0x1d2cc92c, 0x9, 0xb8c8, 0xffffffff7fffffff]}, &(0x7f0000000140)=0x100) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) (async) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r4, 0x0, r3, 0x0, 0x500, 0x0) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x84) (async) 03:58:09 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x2}, '~%'}}, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x2}, '~%'}}, 0x5) (async) 03:58:09 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x7c}}, 0x800) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff00000000da040000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0f2c32927fb15160c7c17aa865457d81e493985b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481b1c30000e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) 03:58:10 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5f}, "3e091c9bfd689b4e5b21bf0a26664c206a375c38be762069c3a7f935554b3b44280f569333d9b7d09499e1177a2ef865c4b10b3296ea053068650d098d5919166a512842239522f6e8171eb066109125f4486d70a6bfbefa93f07ab119298b"}, 0x63) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none, 0x6c}}}, 0xa) 03:58:10 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5f}, "3e091c9bfd689b4e5b21bf0a26664c206a375c38be762069c3a7f935554b3b44280f569333d9b7d09499e1177a2ef865c4b10b3296ea053068650d098d5919166a512842239522f6e8171eb066109125f4486d70a6bfbefa93f07ab119298b"}, 0x63) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none, 0x6c}}}, 0xa) (rerun: 64) 03:58:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x1f00000000000000) 03:58:10 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x54}, @l2cap_cid_signaling={{0x50}, [@l2cap_cmd_rej_unk={{0x1, 0x5f, 0x2}, {0x3}}, @l2cap_move_chan_req={{0xe, 0x22, 0x3}, {0x3, 0x5}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x9fee}}, @l2cap_conn_req={{0x2, 0x6e, 0x4}, {0xa1, 0x5}}, @l2cap_conf_req={{0x4, 0x40, 0x22}, {0xffff, 0x81, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x3, 0x5, 0x1f, 0xffff, 0xfff7}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x95, 0x1, 0xffc1, 0x18, 0x6}}, @l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_info_req={{0xa, 0x7f, 0x2}, {0x3ff}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0xa519, 0x7f}}]}}, 0x59) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x36}, "1e5bf7431a1f266801ff88efda0f2f95996edb9f3c798ab5451c72d1d82c82ec35074072c23e60cf09c8206f2400b3c5312878a05b47"}, 0x3a) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf8}, "78271739dddb0d619b28f1682479123cdc60381614ca1f198ab6c0031709baffec67b88bdb6d18e79fcebcbf6061a78059c2af46885fa79003e2fe11dce07464ea58a0c68a97d10ea5dd95c891b9445f135cb84cf4be5287d46941b254393b9b62bc6a619af0c8fdb4700af664fb30ff4147b7fc7b545f52f94fe7b44ee711bb94c64401a29957373e5ed08beeeca122d5072d4754d61e7fe15ae3caa53ae8fb42fb6231bd1930b72b71552ac97f32cc68296383d1bcd06caa7678fe048a17420b656475ef0664fccc97f32ed805dfa8d9d3f7dbd3090a46ccb0525f2e79329f9800982813378f34be45eb73309f2359e8f1a92e582a6c77"}, 0xfc) [ 498.647457][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 498.728516][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:10 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x2}, @hci_ev_le_ext_adv_report}}, 0x5) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 03:58:10 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x7c}}, 0x800) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff00000000da040000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0f2c32927fb15160c7c17aa865457d81e493985b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481b1c30000e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) pipe(&(0x7f0000000200)) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x7c}}, 0x800) (async) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff00000000da040000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0f2c32927fb15160c7c17aa865457d81e493985b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481b1c30000e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) (async) 03:58:10 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x7c}}, 0x800) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff00000000da040000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0f2c32927fb15160c7c17aa865457d81e493985b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481b1c30000e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) 03:58:10 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x54}, @l2cap_cid_signaling={{0x50}, [@l2cap_cmd_rej_unk={{0x1, 0x5f, 0x2}, {0x3}}, @l2cap_move_chan_req={{0xe, 0x22, 0x3}, {0x3, 0x5}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x9fee}}, @l2cap_conn_req={{0x2, 0x6e, 0x4}, {0xa1, 0x5}}, @l2cap_conf_req={{0x4, 0x40, 0x22}, {0xffff, 0x81, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x3, 0x5, 0x1f, 0xffff, 0xfff7}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x95, 0x1, 0xffc1, 0x18, 0x6}}, @l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_info_req={{0xa, 0x7f, 0x2}, {0x3ff}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0xa519, 0x7f}}]}}, 0x59) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x36}, "1e5bf7431a1f266801ff88efda0f2f95996edb9f3c798ab5451c72d1d82c82ec35074072c23e60cf09c8206f2400b3c5312878a05b47"}, 0x3a) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf8}, "78271739dddb0d619b28f1682479123cdc60381614ca1f198ab6c0031709baffec67b88bdb6d18e79fcebcbf6061a78059c2af46885fa79003e2fe11dce07464ea58a0c68a97d10ea5dd95c891b9445f135cb84cf4be5287d46941b254393b9b62bc6a619af0c8fdb4700af664fb30ff4147b7fc7b545f52f94fe7b44ee711bb94c64401a29957373e5ed08beeeca122d5072d4754d61e7fe15ae3caa53ae8fb42fb6231bd1930b72b71552ac97f32cc68296383d1bcd06caa7678fe048a17420b656475ef0664fccc97f32ed805dfa8d9d3f7dbd3090a46ccb0525f2e79329f9800982813378f34be45eb73309f2359e8f1a92e582a6c77"}, 0xfc) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x54}, @l2cap_cid_signaling={{0x50}, [@l2cap_cmd_rej_unk={{0x1, 0x5f, 0x2}, {0x3}}, @l2cap_move_chan_req={{0xe, 0x22, 0x3}, {0x3, 0x5}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x9fee}}, @l2cap_conn_req={{0x2, 0x6e, 0x4}, {0xa1, 0x5}}, @l2cap_conf_req={{0x4, 0x40, 0x22}, {0xffff, 0x81, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x3, 0x5, 0x1f, 0xffff, 0xfff7}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x95, 0x1, 0xffc1, 0x18, 0x6}}, @l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_info_req={{0xa, 0x7f, 0x2}, {0x3ff}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0xa519, 0x7f}}]}}, 0x59) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x36}, "1e5bf7431a1f266801ff88efda0f2f95996edb9f3c798ab5451c72d1d82c82ec35074072c23e60cf09c8206f2400b3c5312878a05b47"}, 0x3a) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf8}, "78271739dddb0d619b28f1682479123cdc60381614ca1f198ab6c0031709baffec67b88bdb6d18e79fcebcbf6061a78059c2af46885fa79003e2fe11dce07464ea58a0c68a97d10ea5dd95c891b9445f135cb84cf4be5287d46941b254393b9b62bc6a619af0c8fdb4700af664fb30ff4147b7fc7b545f52f94fe7b44ee711bb94c64401a29957373e5ed08beeeca122d5072d4754d61e7fe15ae3caa53ae8fb42fb6231bd1930b72b71552ac97f32cc68296383d1bcd06caa7678fe048a17420b656475ef0664fccc97f32ed805dfa8d9d3f7dbd3090a46ccb0525f2e79329f9800982813378f34be45eb73309f2359e8f1a92e582a6c77"}, 0xfc) (async) 03:58:10 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5f}, "3e091c9bfd689b4e5b21bf0a26664c206a375c38be762069c3a7f935554b3b44280f569333d9b7d09499e1177a2ef865c4b10b3296ea053068650d098d5919166a512842239522f6e8171eb066109125f4486d70a6bfbefa93f07ab119298b"}, 0x63) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none, 0x6c}}}, 0xa) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5f}, "3e091c9bfd689b4e5b21bf0a26664c206a375c38be762069c3a7f935554b3b44280f569333d9b7d09499e1177a2ef865c4b10b3296ea053068650d098d5919166a512842239522f6e8171eb066109125f4486d70a6bfbefa93f07ab119298b"}, 0x63) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none, 0x6c}}}, 0xa) (async) 03:58:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x3f00000000000000) 03:58:10 executing program 2: r0 = msgget$private(0x0, 0x1a1) r1 = msgget$private(0x0, 0x42f) msgsnd(r0, &(0x7f0000000000)={0x2, "1284c3d899078f34fb0ae10843c5d8b1b0516c556a4a198fa474a394456f4b6e7eda5c4db10192680d3eb8b2e9b847d9054fb2d9d312827d9077e04ce209c8c6ddd4214dae0d5dbefc5dcadf27582585219572458087f99ac1836e3ae897e0f3a7fecfbae82dc273d82a62207d44e900b56da1da846fcb8065ef8002933bf9c9b7a4b3c67c945da919efdb5c773fe0e721cc90600705c006910da23509e518e2817970c93709efd87b09d6242defe3f91dfb9d0693fdf1a3afa3547d907ad7dffc667531694975828e38971c743bccab21370643c4d849ef8e7f6e3d21760466c368f6d76515ac4e663b5e914d9a8928280f8762"}, 0xfc, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000400)="fb", 0x1) msgrcv(r1, &(0x7f00000014c0)=ANY=[@ANYRESDEC=r2], 0xb0, 0x0, 0x2000) r3 = msgget$private(0x0, 0x93) msgrcv(r3, &(0x7f0000001580)={0x0, ""/4096}, 0x1004, 0x3, 0x1000) msgsnd(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="03000000000000009a71ba2230ffb5844172fe4588079aaa1249ad91d3a44dc10f9f3d31fa6d98fd0d33f91ea405602ba3f463155a340d4d3484dd8625c3b440457244dd07577d3c41ea46f8c628e6b72ce735d63e8b8f8d7b690b26bc983c8b63fb1d9bb9733ee1e8b027bdc0b36b4739be73be73dfa30a8e0d5d0abc172fe2b4"], 0x81, 0x0) msgsnd(r3, &(0x7f00000025c0)={0x1, "882be1ceb94a262cbddba8bcb68947fa7de92a1c7c49d3e03e5d7860fa5ecaaa2b"}, 0x25, 0x800) msgsnd(r3, &(0x7f00000002c0)={0x2, "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"}, 0x1008, 0x0) r4 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000002600)=""/193) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x16e) r5 = msgget$private(0x0, 0x200) msgrcv(r5, &(0x7f00000001c0)={0x0, ""/143}, 0x93, 0x0, 0x0) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000001300)=""/225) [ 498.907315][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 498.919566][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:10 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x7c}}, 0x800) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff00000000da040000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0f2c32927fb15160c7c17aa865457d81e493985b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481b1c30000e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) 03:58:10 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x2}, @hci_ev_le_ext_adv_report}}, 0x5) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) (rerun: 64) 03:58:10 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04060004"], 0x10) 03:58:10 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x54}, @l2cap_cid_signaling={{0x50}, [@l2cap_cmd_rej_unk={{0x1, 0x5f, 0x2}, {0x3}}, @l2cap_move_chan_req={{0xe, 0x22, 0x3}, {0x3, 0x5}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x9fee}}, @l2cap_conn_req={{0x2, 0x6e, 0x4}, {0xa1, 0x5}}, @l2cap_conf_req={{0x4, 0x40, 0x22}, {0xffff, 0x81, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x3, 0x5, 0x1f, 0xffff, 0xfff7}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x95, 0x1, 0xffc1, 0x18, 0x6}}, @l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_info_req={{0xa, 0x7f, 0x2}, {0x3ff}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0xa519, 0x7f}}]}}, 0x59) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x36}, "1e5bf7431a1f266801ff88efda0f2f95996edb9f3c798ab5451c72d1d82c82ec35074072c23e60cf09c8206f2400b3c5312878a05b47"}, 0x3a) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf8}, "78271739dddb0d619b28f1682479123cdc60381614ca1f198ab6c0031709baffec67b88bdb6d18e79fcebcbf6061a78059c2af46885fa79003e2fe11dce07464ea58a0c68a97d10ea5dd95c891b9445f135cb84cf4be5287d46941b254393b9b62bc6a619af0c8fdb4700af664fb30ff4147b7fc7b545f52f94fe7b44ee711bb94c64401a29957373e5ed08beeeca122d5072d4754d61e7fe15ae3caa53ae8fb42fb6231bd1930b72b71552ac97f32cc68296383d1bcd06caa7678fe048a17420b656475ef0664fccc97f32ed805dfa8d9d3f7dbd3090a46ccb0525f2e79329f9800982813378f34be45eb73309f2359e8f1a92e582a6c77"}, 0xfc) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x54}, @l2cap_cid_signaling={{0x50}, [@l2cap_cmd_rej_unk={{0x1, 0x5f, 0x2}, {0x3}}, @l2cap_move_chan_req={{0xe, 0x22, 0x3}, {0x3, 0x5}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x9fee}}, @l2cap_conn_req={{0x2, 0x6e, 0x4}, {0xa1, 0x5}}, @l2cap_conf_req={{0x4, 0x40, 0x22}, {0xffff, 0x81, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x3, 0x5, 0x1f, 0xffff, 0xfff7}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x95, 0x1, 0xffc1, 0x18, 0x6}}, @l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_info_req={{0xa, 0x7f, 0x2}, {0x3ff}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0xa519, 0x7f}}]}}, 0x59) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x36}, "1e5bf7431a1f266801ff88efda0f2f95996edb9f3c798ab5451c72d1d82c82ec35074072c23e60cf09c8206f2400b3c5312878a05b47"}, 0x3a) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf8}, "78271739dddb0d619b28f1682479123cdc60381614ca1f198ab6c0031709baffec67b88bdb6d18e79fcebcbf6061a78059c2af46885fa79003e2fe11dce07464ea58a0c68a97d10ea5dd95c891b9445f135cb84cf4be5287d46941b254393b9b62bc6a619af0c8fdb4700af664fb30ff4147b7fc7b545f52f94fe7b44ee711bb94c64401a29957373e5ed08beeeca122d5072d4754d61e7fe15ae3caa53ae8fb42fb6231bd1930b72b71552ac97f32cc68296383d1bcd06caa7678fe048a17420b656475ef0664fccc97f32ed805dfa8d9d3f7dbd3090a46ccb0525f2e79329f9800982813378f34be45eb73309f2359e8f1a92e582a6c77"}, 0xfc) (async) 03:58:10 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:58:10 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) 03:58:10 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04060004"], 0x10) 03:58:10 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x8, 0x6, "f7ed7a", 0x20, 0x2}, {@none, 0x2, 0x4, 0x5, "79401e", 0x4a55, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x7f}, 0x7, 0xff, 0x8, "99423b", 0x2, 0xe}, {@none, 0x7f, 0x1, 0x4, "19de22", 0x9, 0x76}, {@none, 0x0, 0x1, 0xf9, "90ecd1", 0x1, 0x4}, {@any, 0x1, 0x9, 0x7b, "f39d3f", 0x8000, 0xf8}, {@any, 0x5, 0x9, 0x7, "6cf42c", 0x4}, {@any, 0x6, 0xff, 0x6, "65187e", 0x0, 0x20}]}}}, 0x7c) 03:58:10 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 499.046028][ T3658] Bluetooth: hci1: unexpected event 0x06 length: 13 > 3 [ 499.140986][ T3658] Bluetooth: hci4: unexpected event 0x3e length: 363 > 260 [ 499.148007][ T3658] Bluetooth: hci4: unexpected subevent 0x0d length: 362 > 260 [ 499.163007][ T3658] Bluetooth: hci4: Malformed LE Event: 0x0d 03:58:10 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04060004"], 0x10) [ 499.218966][ T3658] Bluetooth: hci1: unexpected event 0x06 length: 13 > 3 03:58:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x803e000000000000) 03:58:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x803e000000000000) 03:58:11 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x2}, @hci_ev_le_ext_adv_report}}, 0x5) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 03:58:11 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000400)="fb", 0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=r2, @ANYBLOB="e36b56aa2d3eec10114eddf47b24093a5db6ba26534a5c65c4ef163c58e48ef30d0a2d6f85258720c725cc36d7241aba1af806ae7607a1b74f50c91502a4126dbc874a2931674875a3de2fc35a908b45488450c93931bedbef43fed3ad9c9997d8fc39cbc237f427e295601fdf", @ANYRES64=r1], 0x10) read$ptp(r1, &(0x7f0000000240)=""/254, 0xfe) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x9f, 0x2}, {0x3}}}}, 0xf) write$binfmt_misc(r3, &(0x7f0000000180)={'syz1', "33734c163e5964647901b4d0d5d52b3b49e79f33e4cf28a80f2bf68fa28dfb074d6190147a34c70f11581fb795125d675b55dd061a5006232864d473a5f9a21aba8956c569503a6218c7ddeb1034f606577823c7c54f06fe1a6dac6301fd92bb9e15a119dae15daff56dea61c59977b298"}, 0x75) 03:58:11 executing program 0: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x1f, 0xc9, "1da412", "ba63e9", 'MU\t', "d7fc42", 0x1f, 0x3f, 0x21, 0xa0, 0x3f, 0x5, 0x6, 0x4, 0x7, 0x2}}}}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x46001}, 0x40) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x5a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4936bf4a783c4982857fc528adeb12b567e53e53e709068148480c2e5544987d94dd72de729930b3aca9b84cb3ce116a48b9d5e8cb47a8ff070000016dfb0d9ed8bfaf9ae4", @ANYRES16=r6, @ANYBLOB="00042cbd7000ffdbdf2508000000050013002000000065f2099d8b7184f600000000a3418cc3a7a1f65c0b3ecb44f6761e9b483c5676044769ae32226b689bdd322cc84fca4b501ffd33e31eac6760b8c84b24a2a10f9a3c5be98deaf69130299daf8c990f3d59aa8198441e3aae1f2eabeb4322cb37c08c6448cda9c5e89db312fa4e0a057804f18e64f2a8586272d44868af128ac2de5c15b1306bd54c7a0587973ca482c4dee5e7cb97cf7b9bdb977ec15216ec70da0a7de7bf6f86"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000400)="fb", 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8b}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x8) 03:58:11 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x8, 0x6, "f7ed7a", 0x20, 0x2}, {@none, 0x2, 0x4, 0x5, "79401e", 0x4a55, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x7f}, 0x7, 0xff, 0x8, "99423b", 0x2, 0xe}, {@none, 0x7f, 0x1, 0x4, "19de22", 0x9, 0x76}, {@none, 0x0, 0x1, 0xf9, "90ecd1", 0x1, 0x4}, {@any, 0x1, 0x9, 0x7b, "f39d3f", 0x8000, 0xf8}, {@any, 0x5, 0x9, 0x7, "6cf42c", 0x4}, {@any, 0x6, 0xff, 0x6, "65187e", 0x0, 0x20}]}}}, 0x7c) 03:58:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xc000000000000000) 03:58:11 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x8, 0x6, "f7ed7a", 0x20, 0x2}, {@none, 0x2, 0x4, 0x5, "79401e", 0x4a55, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x7f}, 0x7, 0xff, 0x8, "99423b", 0x2, 0xe}, {@none, 0x7f, 0x1, 0x4, "19de22", 0x9, 0x76}, {@none, 0x0, 0x1, 0xf9, "90ecd1", 0x1, 0x4}, {@any, 0x1, 0x9, 0x7b, "f39d3f", 0x8000, 0xf8}, {@any, 0x5, 0x9, 0x7, "6cf42c", 0x4}, {@any, 0x6, 0xff, 0x6, "65187e", 0x0, 0x20}]}}}, 0x7c) 03:58:11 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0017000000000000aaaaaaaaaa0000b77310a216cc00ea892377caf7a7cbac889ff2e809f192040716721d5f3eb7f8fcbe8bba9d1ec9495329ddb6bfce000b53989bc960e5d17cba9b7515e5e285f263e97256625d5c4e6965d9730afcf913f822b2aed3c97d4de644c030493eadb687c22899e06d58b53578d6492f95a5c0c82eef4096f717ae63904d44c64402d69abb78f4a6a7ff5a6abf4b5dfb1dff08000000000000000000"], 0x1d) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xac}, "d2302f952f52ced3efbf8151d99cf03ac967283f2e0cf2e1aab3efe7155997e94076a7146cdaa149ebfff3e4fa16953dba27ee89aeb695e43d4a29fb7bc0395fce31ce444f56a4635fa67af718ef81a5435f4e99fe2653a53edf60e31bd96c752ae8e5410c939aead270fc7772b531ef34602fe51107067107236cf2b7f301677c11aef59de37d3c092bd026554cc7e3ff921fb20b3c4cb5a7116debbae4c5d82a9490a92d66391aa942009b"}, 0xb0) 03:58:11 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000400)="fb", 0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=r2, @ANYBLOB="e36b56aa2d3eec10114eddf47b24093a5db6ba26534a5c65c4ef163c58e48ef30d0a2d6f85258720c725cc36d7241aba1af806ae7607a1b74f50c91502a4126dbc874a2931674875a3de2fc35a908b45488450c93931bedbef43fed3ad9c9997d8fc39cbc237f427e295601fdf", @ANYRES64=r1], 0x10) read$ptp(r1, &(0x7f0000000240)=""/254, 0xfe) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x9f, 0x2}, {0x3}}}}, 0xf) write$binfmt_misc(r3, &(0x7f0000000180)={'syz1', "33734c163e5964647901b4d0d5d52b3b49e79f33e4cf28a80f2bf68fa28dfb074d6190147a34c70f11581fb795125d675b55dd061a5006232864d473a5f9a21aba8956c569503a6218c7ddeb1034f606577823c7c54f06fe1a6dac6301fd92bb9e15a119dae15daff56dea61c59977b298"}, 0x75) pipe(&(0x7f0000000200)) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) pipe(&(0x7f0000000080)) (async) write(r2, &(0x7f0000000400)="fb", 0x1) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=r2, @ANYBLOB="e36b56aa2d3eec10114eddf47b24093a5db6ba26534a5c65c4ef163c58e48ef30d0a2d6f85258720c725cc36d7241aba1af806ae7607a1b74f50c91502a4126dbc874a2931674875a3de2fc35a908b45488450c93931bedbef43fed3ad9c9997d8fc39cbc237f427e295601fdf", @ANYRES64=r1], 0x10) (async) read$ptp(r1, &(0x7f0000000240)=""/254, 0xfe) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x9f, 0x2}, {0x3}}}}, 0xf) (async) write$binfmt_misc(r3, &(0x7f0000000180)={'syz1', "33734c163e5964647901b4d0d5d52b3b49e79f33e4cf28a80f2bf68fa28dfb074d6190147a34c70f11581fb795125d675b55dd061a5006232864d473a5f9a21aba8956c569503a6218c7ddeb1034f606577823c7c54f06fe1a6dac6301fd92bb9e15a119dae15daff56dea61c59977b298"}, 0x75) (async) 03:58:11 executing program 0: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x1f, 0xc9, "1da412", "ba63e9", 'MU\t', "d7fc42", 0x1f, 0x3f, 0x21, 0xa0, 0x3f, 0x5, 0x6, 0x4, 0x7, 0x2}}}}, 0x20) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x46001}, 0x40) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x5a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4936bf4a783c4982857fc528adeb12b567e53e53e709068148480c2e5544987d94dd72de729930b3aca9b84cb3ce116a48b9d5e8cb47a8ff070000016dfb0d9ed8bfaf9ae4", @ANYRES16=r6, @ANYBLOB="00042cbd7000ffdbdf2508000000050013002000000065f2099d8b7184f600000000a3418cc3a7a1f65c0b3ecb44f6761e9b483c5676044769ae32226b689bdd322cc84fca4b501ffd33e31eac6760b8c84b24a2a10f9a3c5be98deaf69130299daf8c990f3d59aa8198441e3aae1f2eabeb4322cb37c08c6448cda9c5e89db312fa4e0a057804f18e64f2a8586272d44868af128ac2de5c15b1306bd54c7a0587973ca482c4dee5e7cb97cf7b9bdb977ec15216ec70da0a7de7bf6f86"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000400)="fb", 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8b}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x8) 03:58:11 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0017000000000000aaaaaaaaaa0000b77310a216cc00ea892377caf7a7cbac889ff2e809f192040716721d5f3eb7f8fcbe8bba9d1ec9495329ddb6bfce000b53989bc960e5d17cba9b7515e5e285f263e97256625d5c4e6965d9730afcf913f822b2aed3c97d4de644c030493eadb687c22899e06d58b53578d6492f95a5c0c82eef4096f717ae63904d44c64402d69abb78f4a6a7ff5a6abf4b5dfb1dff08000000000000000000"], 0x1d) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xac}, "d2302f952f52ced3efbf8151d99cf03ac967283f2e0cf2e1aab3efe7155997e94076a7146cdaa149ebfff3e4fa16953dba27ee89aeb695e43d4a29fb7bc0395fce31ce444f56a4635fa67af718ef81a5435f4e99fe2653a53edf60e31bd96c752ae8e5410c939aead270fc7772b531ef34602fe51107067107236cf2b7f301677c11aef59de37d3c092bd026554cc7e3ff921fb20b3c4cb5a7116debbae4c5d82a9490a92d66391aa942009b"}, 0xb0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0017000000000000aaaaaaaaaa0000b77310a216cc00ea892377caf7a7cbac889ff2e809f192040716721d5f3eb7f8fcbe8bba9d1ec9495329ddb6bfce000b53989bc960e5d17cba9b7515e5e285f263e97256625d5c4e6965d9730afcf913f822b2aed3c97d4de644c030493eadb687c22899e06d58b53578d6492f95a5c0c82eef4096f717ae63904d44c64402d69abb78f4a6a7ff5a6abf4b5dfb1dff08000000000000000000"], 0x1d) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xac}, "d2302f952f52ced3efbf8151d99cf03ac967283f2e0cf2e1aab3efe7155997e94076a7146cdaa149ebfff3e4fa16953dba27ee89aeb695e43d4a29fb7bc0395fce31ce444f56a4635fa67af718ef81a5435f4e99fe2653a53edf60e31bd96c752ae8e5410c939aead270fc7772b531ef34602fe51107067107236cf2b7f301677c11aef59de37d3c092bd026554cc7e3ff921fb20b3c4cb5a7116debbae4c5d82a9490a92d66391aa942009b"}, 0xb0) (async) 03:58:11 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000400)="fb", 0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=r2, @ANYBLOB="e36b56aa2d3eec10114eddf47b24093a5db6ba26534a5c65c4ef163c58e48ef30d0a2d6f85258720c725cc36d7241aba1af806ae7607a1b74f50c91502a4126dbc874a2931674875a3de2fc35a908b45488450c93931bedbef43fed3ad9c9997d8fc39cbc237f427e295601fdf", @ANYRES64=r1], 0x10) read$ptp(r1, &(0x7f0000000240)=""/254, 0xfe) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x9f, 0x2}, {0x3}}}}, 0xf) write$binfmt_misc(r3, &(0x7f0000000180)={'syz1', "33734c163e5964647901b4d0d5d52b3b49e79f33e4cf28a80f2bf68fa28dfb074d6190147a34c70f11581fb795125d675b55dd061a5006232864d473a5f9a21aba8956c569503a6218c7ddeb1034f606577823c7c54f06fe1a6dac6301fd92bb9e15a119dae15daff56dea61c59977b298"}, 0x75) pipe(&(0x7f0000000200)) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) pipe(&(0x7f0000000080)) (async) write(r2, &(0x7f0000000400)="fb", 0x1) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=r2, @ANYBLOB="e36b56aa2d3eec10114eddf47b24093a5db6ba26534a5c65c4ef163c58e48ef30d0a2d6f85258720c725cc36d7241aba1af806ae7607a1b74f50c91502a4126dbc874a2931674875a3de2fc35a908b45488450c93931bedbef43fed3ad9c9997d8fc39cbc237f427e295601fdf", @ANYRES64=r1], 0x10) (async) read$ptp(r1, &(0x7f0000000240)=""/254, 0xfe) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x9f, 0x2}, {0x3}}}}, 0xf) (async) write$binfmt_misc(r3, &(0x7f0000000180)={'syz1', "33734c163e5964647901b4d0d5d52b3b49e79f33e4cf28a80f2bf68fa28dfb074d6190147a34c70f11581fb795125d675b55dd061a5006232864d473a5f9a21aba8956c569503a6218c7ddeb1034f606577823c7c54f06fe1a6dac6301fd92bb9e15a119dae15daff56dea61c59977b298"}, 0x75) (async) 03:58:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xc000000000000000) 03:58:11 executing program 0: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x1f, 0xc9, "1da412", "ba63e9", 'MU\t', "d7fc42", 0x1f, 0x3f, 0x21, 0xa0, 0x3f, 0x5, 0x6, 0x4, 0x7, 0x2}}}}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x46001}, 0x40) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x5a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4936bf4a783c4982857fc528adeb12b567e53e53e709068148480c2e5544987d94dd72de729930b3aca9b84cb3ce116a48b9d5e8cb47a8ff070000016dfb0d9ed8bfaf9ae4", @ANYRES16=r6, @ANYBLOB="00042cbd7000ffdbdf2508000000050013002000000065f2099d8b7184f600000000a3418cc3a7a1f65c0b3ecb44f6761e9b483c5676044769ae32226b689bdd322cc84fca4b501ffd33e31eac6760b8c84b24a2a10f9a3c5be98deaf69130299daf8c990f3d59aa8198441e3aae1f2eabeb4322cb37c08c6448cda9c5e89db312fa4e0a057804f18e64f2a8586272d44868af128ac2de5c15b1306bd54c7a0587973ca482c4dee5e7cb97cf7b9bdb977ec15216ec70da0a7de7bf6f86"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000400)="fb", 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8b}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x8) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x1f, 0xc9, "1da412", "ba63e9", 'MU\t', "d7fc42", 0x1f, 0x3f, 0x21, 0xa0, 0x3f, 0x5, 0x6, 0x4, 0x7, 0x2}}}}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x46001}, 0x40) (async) creat(&(0x7f0000000200)='./file0\x00', 0x5a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4936bf4a783c4982857fc528adeb12b567e53e53e709068148480c2e5544987d94dd72de729930b3aca9b84cb3ce116a48b9d5e8cb47a8ff070000016dfb0d9ed8bfaf9ae4", @ANYRES16=r6, @ANYBLOB="00042cbd7000ffdbdf2508000000050013002000000065f2099d8b7184f600000000a3418cc3a7a1f65c0b3ecb44f6761e9b483c5676044769ae32226b689bdd322cc84fca4b501ffd33e31eac6760b8c84b24a2a10f9a3c5be98deaf69130299daf8c990f3d59aa8198441e3aae1f2eabeb4322cb37c08c6448cda9c5e89db312fa4e0a057804f18e64f2a8586272d44868af128ac2de5c15b1306bd54c7a0587973ca482c4dee5e7cb97cf7b9bdb977ec15216ec70da0a7de7bf6f86"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) pipe(&(0x7f0000000080)) (async) write(r7, &(0x7f0000000400)="fb", 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8b}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x8) (async) 03:58:11 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x56}, "ede902f0c232a47e33d0854c30c733887af58c01bad681ffeeb81d6399bea6fa063f1dd4c3f792f870125fc17e63f9afdda5dca09f691192a9f6f30e8776740416fa778ac3eac41fe30c49bf353696bd90ce2559fa69"}, 0x5a) 03:58:11 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0017000000000000aaaaaaaaaa0000b77310a216cc00ea892377caf7a7cbac889ff2e809f192040716721d5f3eb7f8fcbe8bba9d1ec9495329ddb6bfce000b53989bc960e5d17cba9b7515e5e285f263e97256625d5c4e6965d9730afcf913f822b2aed3c97d4de644c030493eadb687c22899e06d58b53578d6492f95a5c0c82eef4096f717ae63904d44c64402d69abb78f4a6a7ff5a6abf4b5dfb1dff08000000000000000000"], 0x1d) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xac}, "d2302f952f52ced3efbf8151d99cf03ac967283f2e0cf2e1aab3efe7155997e94076a7146cdaa149ebfff3e4fa16953dba27ee89aeb695e43d4a29fb7bc0395fce31ce444f56a4635fa67af718ef81a5435f4e99fe2653a53edf60e31bd96c752ae8e5410c939aead270fc7772b531ef34602fe51107067107236cf2b7f301677c11aef59de37d3c092bd026554cc7e3ff921fb20b3c4cb5a7116debbae4c5d82a9490a92d66391aa942009b"}, 0xb0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0017000000000000aaaaaaaaaa0000b77310a216cc00ea892377caf7a7cbac889ff2e809f192040716721d5f3eb7f8fcbe8bba9d1ec9495329ddb6bfce000b53989bc960e5d17cba9b7515e5e285f263e97256625d5c4e6965d9730afcf913f822b2aed3c97d4de644c030493eadb687c22899e06d58b53578d6492f95a5c0c82eef4096f717ae63904d44c64402d69abb78f4a6a7ff5a6abf4b5dfb1dff08000000000000000000"], 0x1d) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xac}, "d2302f952f52ced3efbf8151d99cf03ac967283f2e0cf2e1aab3efe7155997e94076a7146cdaa149ebfff3e4fa16953dba27ee89aeb695e43d4a29fb7bc0395fce31ce444f56a4635fa67af718ef81a5435f4e99fe2653a53edf60e31bd96c752ae8e5410c939aead270fc7772b531ef34602fe51107067107236cf2b7f301677c11aef59de37d3c092bd026554cc7e3ff921fb20b3c4cb5a7116debbae4c5d82a9490a92d66391aa942009b"}, 0xb0) (async) 03:58:11 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0xffff, 0x2, 0xb2ad, 0x3}, 0x37, [0x7, 0xe80, 0x4, 0xfc, 0x7ff, 0x10000, 0x3, 0x1f, 0x0, 0xd9f, 0xddd1, 0xa4a, 0x0, 0x2, 0x4, 0x81, 0xfff, 0x2, 0x8111, 0xffffffff, 0x401, 0x4, 0x3ff, 0x7, 0xfffffe00, 0x0, 0x9, 0xfffffffe, 0x1, 0x1f, 0x5, 0x6, 0xdac, 0xffffffff, 0x0, 0x7, 0x0, 0x2db5, 0x70, 0x20, 0x4b7d, 0x5, 0x29, 0x0, 0x8001, 0xfff, 0x2d, 0x2, 0x6, 0x9, 0x8, 0x9, 0x2, 0xda, 0x10000000, 0x7, 0xfffffff7, 0x7, 0x81, 0x9, 0x3f, 0x8, 0x2, 0x8], [0x6, 0x5e, 0x8, 0x5, 0x2, 0x981, 0x0, 0x1f, 0xfb, 0x2, 0x10001, 0xffffffff, 0x105, 0x3, 0x3, 0x8000, 0x8, 0x9, 0x3, 0x5, 0x9, 0x0, 0xff, 0x7, 0x112e, 0x939f, 0x7ff, 0x4, 0x3, 0x8, 0x7, 0x5, 0xfffffffb, 0x7, 0x3, 0x101, 0x0, 0x10001, 0x5b97, 0x4, 0x0, 0x9, 0x3, 0x2, 0x20, 0x40, 0x3, 0x1, 0x1590, 0xfffffffb, 0x7, 0x6, 0x40, 0x1, 0x2, 0x2, 0xc22, 0xffffffff, 0xc5d9, 0x582, 0x100, 0x400, 0xffffff16, 0xb8], [0x7c, 0x7f, 0xe3, 0x5ba, 0x4000000, 0xffff, 0x5504, 0x4, 0x8000, 0xc7, 0x91d, 0x2, 0x8, 0x83, 0x0, 0x200, 0x3, 0xffffffff, 0xcd, 0x80000000, 0x1a19, 0x10001, 0xbc5, 0x101, 0x6, 0x2, 0x2, 0x10001, 0x10000, 0x0, 0xffffffff, 0x40, 0x4e19, 0xa5, 0x2, 0x3, 0x3, 0x3, 0xffffff7f, 0x1f, 0x8000, 0x7, 0x2, 0x7b, 0x4, 0x2f, 0x6, 0x2, 0x2, 0xffffffff, 0xea7, 0x800, 0x9, 0x1, 0x8, 0x401, 0x0, 0x5, 0x899d, 0x400, 0x400, 0x3ff, 0x7, 0x6], [0x101, 0x6, 0x2, 0x23, 0xc, 0x6, 0x9, 0x8, 0xffffffff, 0x4, 0x5, 0x3ff, 0x91ef, 0x0, 0xffff, 0x7, 0x81, 0x8, 0x4, 0x3, 0x9, 0x0, 0x2, 0xff, 0x0, 0x4, 0x4, 0x5, 0x6, 0x9, 0x9, 0x1, 0x5, 0x7, 0x4, 0x7fff, 0xb, 0x1000, 0x20, 0x1, 0x0, 0x7fff, 0x1fc5, 0x4, 0x7ff, 0x5, 0x7, 0x1, 0x3, 0x9, 0x81, 0x7, 0x1f6, 0x8, 0x8, 0x2, 0x15, 0x0, 0x6, 0x5, 0x1, 0x0, 0x2, 0x6]}, 0x45c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) 03:58:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xc03e000000000000) 03:58:11 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x56}, "ede902f0c232a47e33d0854c30c733887af58c01bad681ffeeb81d6399bea6fa063f1dd4c3f792f870125fc17e63f9afdda5dca09f691192a9f6f30e8776740416fa778ac3eac41fe30c49bf353696bd90ce2559fa69"}, 0x5a) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x56}, "ede902f0c232a47e33d0854c30c733887af58c01bad681ffeeb81d6399bea6fa063f1dd4c3f792f870125fc17e63f9afdda5dca09f691192a9f6f30e8776740416fa778ac3eac41fe30c49bf353696bd90ce2559fa69"}, 0x5a) (async) 03:58:11 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0xffff, 0x2, 0xb2ad, 0x3}, 0x37, [0x7, 0xe80, 0x4, 0xfc, 0x7ff, 0x10000, 0x3, 0x1f, 0x0, 0xd9f, 0xddd1, 0xa4a, 0x0, 0x2, 0x4, 0x81, 0xfff, 0x2, 0x8111, 0xffffffff, 0x401, 0x4, 0x3ff, 0x7, 0xfffffe00, 0x0, 0x9, 0xfffffffe, 0x1, 0x1f, 0x5, 0x6, 0xdac, 0xffffffff, 0x0, 0x7, 0x0, 0x2db5, 0x70, 0x20, 0x4b7d, 0x5, 0x29, 0x0, 0x8001, 0xfff, 0x2d, 0x2, 0x6, 0x9, 0x8, 0x9, 0x2, 0xda, 0x10000000, 0x7, 0xfffffff7, 0x7, 0x81, 0x9, 0x3f, 0x8, 0x2, 0x8], [0x6, 0x5e, 0x8, 0x5, 0x2, 0x981, 0x0, 0x1f, 0xfb, 0x2, 0x10001, 0xffffffff, 0x105, 0x3, 0x3, 0x8000, 0x8, 0x9, 0x3, 0x5, 0x9, 0x0, 0xff, 0x7, 0x112e, 0x939f, 0x7ff, 0x4, 0x3, 0x8, 0x7, 0x5, 0xfffffffb, 0x7, 0x3, 0x101, 0x0, 0x10001, 0x5b97, 0x4, 0x0, 0x9, 0x3, 0x2, 0x20, 0x40, 0x3, 0x1, 0x1590, 0xfffffffb, 0x7, 0x6, 0x40, 0x1, 0x2, 0x2, 0xc22, 0xffffffff, 0xc5d9, 0x582, 0x100, 0x400, 0xffffff16, 0xb8], [0x7c, 0x7f, 0xe3, 0x5ba, 0x4000000, 0xffff, 0x5504, 0x4, 0x8000, 0xc7, 0x91d, 0x2, 0x8, 0x83, 0x0, 0x200, 0x3, 0xffffffff, 0xcd, 0x80000000, 0x1a19, 0x10001, 0xbc5, 0x101, 0x6, 0x2, 0x2, 0x10001, 0x10000, 0x0, 0xffffffff, 0x40, 0x4e19, 0xa5, 0x2, 0x3, 0x3, 0x3, 0xffffff7f, 0x1f, 0x8000, 0x7, 0x2, 0x7b, 0x4, 0x2f, 0x6, 0x2, 0x2, 0xffffffff, 0xea7, 0x800, 0x9, 0x1, 0x8, 0x401, 0x0, 0x5, 0x899d, 0x400, 0x400, 0x3ff, 0x7, 0x6], [0x101, 0x6, 0x2, 0x23, 0xc, 0x6, 0x9, 0x8, 0xffffffff, 0x4, 0x5, 0x3ff, 0x91ef, 0x0, 0xffff, 0x7, 0x81, 0x8, 0x4, 0x3, 0x9, 0x0, 0x2, 0xff, 0x0, 0x4, 0x4, 0x5, 0x6, 0x9, 0x9, 0x1, 0x5, 0x7, 0x4, 0x7fff, 0xb, 0x1000, 0x20, 0x1, 0x0, 0x7fff, 0x1fc5, 0x4, 0x7ff, 0x5, 0x7, 0x1, 0x3, 0x9, 0x81, 0x7, 0x1f6, 0x8, 0x8, 0x2, 0x15, 0x0, 0x6, 0x5, 0x1, 0x0, 0x2, 0x6]}, 0x45c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) [ 499.272615][ T3658] Bluetooth: hci1: unexpected event 0x06 length: 13 > 3 [ 500.256363][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 500.271495][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:11 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbf}, "83bd884e6bd812c1687711d252a1b917af828065d7c68683ea5dde8d3ebef6eb8f73d00db8492cbb1ef80799d875cfd8dcbbbeea4f32f31893bc3126aeff904445163f24fa7186362643f7dfb5c406a1e4e7b38c91508a6bb04b1431afe72bd52f2f1110f9c17acf71ac953301a7c73cb38b76d6717afa06bd42eded442d6ebafd910baf258d84e09e9cbbfadc5b4ff361b94053a66b644bf7958c60dc1414692da50dc5b18049d87096cd15bbcac68d2cece674175afa4c31a7c30a32e7a7"}, 0xc3) [ 500.427190][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:11 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0xffff, 0x2, 0xb2ad, 0x3}, 0x37, [0x7, 0xe80, 0x4, 0xfc, 0x7ff, 0x10000, 0x3, 0x1f, 0x0, 0xd9f, 0xddd1, 0xa4a, 0x0, 0x2, 0x4, 0x81, 0xfff, 0x2, 0x8111, 0xffffffff, 0x401, 0x4, 0x3ff, 0x7, 0xfffffe00, 0x0, 0x9, 0xfffffffe, 0x1, 0x1f, 0x5, 0x6, 0xdac, 0xffffffff, 0x0, 0x7, 0x0, 0x2db5, 0x70, 0x20, 0x4b7d, 0x5, 0x29, 0x0, 0x8001, 0xfff, 0x2d, 0x2, 0x6, 0x9, 0x8, 0x9, 0x2, 0xda, 0x10000000, 0x7, 0xfffffff7, 0x7, 0x81, 0x9, 0x3f, 0x8, 0x2, 0x8], [0x6, 0x5e, 0x8, 0x5, 0x2, 0x981, 0x0, 0x1f, 0xfb, 0x2, 0x10001, 0xffffffff, 0x105, 0x3, 0x3, 0x8000, 0x8, 0x9, 0x3, 0x5, 0x9, 0x0, 0xff, 0x7, 0x112e, 0x939f, 0x7ff, 0x4, 0x3, 0x8, 0x7, 0x5, 0xfffffffb, 0x7, 0x3, 0x101, 0x0, 0x10001, 0x5b97, 0x4, 0x0, 0x9, 0x3, 0x2, 0x20, 0x40, 0x3, 0x1, 0x1590, 0xfffffffb, 0x7, 0x6, 0x40, 0x1, 0x2, 0x2, 0xc22, 0xffffffff, 0xc5d9, 0x582, 0x100, 0x400, 0xffffff16, 0xb8], [0x7c, 0x7f, 0xe3, 0x5ba, 0x4000000, 0xffff, 0x5504, 0x4, 0x8000, 0xc7, 0x91d, 0x2, 0x8, 0x83, 0x0, 0x200, 0x3, 0xffffffff, 0xcd, 0x80000000, 0x1a19, 0x10001, 0xbc5, 0x101, 0x6, 0x2, 0x2, 0x10001, 0x10000, 0x0, 0xffffffff, 0x40, 0x4e19, 0xa5, 0x2, 0x3, 0x3, 0x3, 0xffffff7f, 0x1f, 0x8000, 0x7, 0x2, 0x7b, 0x4, 0x2f, 0x6, 0x2, 0x2, 0xffffffff, 0xea7, 0x800, 0x9, 0x1, 0x8, 0x401, 0x0, 0x5, 0x899d, 0x400, 0x400, 0x3ff, 0x7, 0x6], [0x101, 0x6, 0x2, 0x23, 0xc, 0x6, 0x9, 0x8, 0xffffffff, 0x4, 0x5, 0x3ff, 0x91ef, 0x0, 0xffff, 0x7, 0x81, 0x8, 0x4, 0x3, 0x9, 0x0, 0x2, 0xff, 0x0, 0x4, 0x4, 0x5, 0x6, 0x9, 0x9, 0x1, 0x5, 0x7, 0x4, 0x7fff, 0xb, 0x1000, 0x20, 0x1, 0x0, 0x7fff, 0x1fc5, 0x4, 0x7ff, 0x5, 0x7, 0x1, 0x3, 0x9, 0x81, 0x7, 0x1f6, 0x8, 0x8, 0x2, 0x15, 0x0, 0x6, 0x5, 0x1, 0x0, 0x2, 0x6]}, 0x45c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) 03:58:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xe03f030000000000) [ 500.470529][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 500.478379][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:11 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@none, 0x2, 0x6, 0x9, "f7b341", 0xac2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc, 0x0, 0x40, "91aa72", 0x60, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xe3, 0x40, 0x5d, "191d31", 0x1c0}, {@any, 0x4, 0x8, 0x4, "34c9d2", 0x977, 0x9}, {@any, 0x0, 0x9, 0x5, "271bfa", 0x8}]}}}, 0x4f) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xd77f553b8f3e6668, 0xa0}, "09b83c60d92cccac102627ddf64d81233377201b409b03891513ffaef033d46bf5f5a6cf31696d9a2da0e2a06ab8e0f5373b73e002a23224504fa1c636d50eecf36512f2e3ee5ee568f76e4eea7fc32925b26f3cada0efceeb3efafc2e3cd47baec7cffc9e2e615cbc4f6f438b0948c0b306a431b25e26b816292f74fe73ee7206817f9e116b6d8b99bb0ccceb0a5a04d9ac26470aa1eb96aa213fb512c263c9"}, 0xa4) 03:58:12 executing program 2: r0 = msgget$private(0x0, 0x1a1) r1 = msgget$private(0x0, 0x42f) msgsnd(r0, &(0x7f0000000000)={0x2, "1284c3d899078f34fb0ae10843c5d8b1b0516c556a4a198fa474a394456f4b6e7eda5c4db10192680d3eb8b2e9b847d9054fb2d9d312827d9077e04ce209c8c6ddd4214dae0d5dbefc5dcadf27582585219572458087f99ac1836e3ae897e0f3a7fecfbae82dc273d82a62207d44e900b56da1da846fcb8065ef8002933bf9c9b7a4b3c67c945da919efdb5c773fe0e721cc90600705c006910da23509e518e2817970c93709efd87b09d6242defe3f91dfb9d0693fdf1a3afa3547d907ad7dffc667531694975828e38971c743bccab21370643c4d849ef8e7f6e3d21760466c368f6d76515ac4e663b5e914d9a8928280f8762"}, 0xfc, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000400)="fb", 0x1) msgrcv(r1, &(0x7f00000014c0)=ANY=[@ANYRESDEC=r2], 0xb0, 0x0, 0x2000) r3 = msgget$private(0x0, 0x93) msgrcv(r3, &(0x7f0000001580)={0x0, ""/4096}, 0x1004, 0x3, 0x1000) msgsnd(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="03000000000000009a71ba2230ffb5844172fe4588079aaa1249ad91d3a44dc10f9f3d31fa6d98fd0d33f91ea405602ba3f463155a340d4d3484dd8625c3b440457244dd07577d3c41ea46f8c628e6b72ce735d63e8b8f8d7b690b26bc983c8b63fb1d9bb9733ee1e8b027bdc0b36b4739be73be73dfa30a8e0d5d0abc172fe2b4"], 0x81, 0x0) msgsnd(r3, &(0x7f00000025c0)={0x1, "882be1ceb94a262cbddba8bcb68947fa7de92a1c7c49d3e03e5d7860fa5ecaaa2b"}, 0x25, 0x800) msgsnd(r3, &(0x7f00000002c0)={0x2, "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"}, 0x1008, 0x0) r4 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000002600)=""/193) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x16e) r5 = msgget$private(0x0, 0x200) msgrcv(r5, &(0x7f00000001c0)={0x0, ""/143}, 0x93, 0x0, 0x0) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000001300)=""/225) 03:58:12 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x56}, "ede902f0c232a47e33d0854c30c733887af58c01bad681ffeeb81d6399bea6fa063f1dd4c3f792f870125fc17e63f9afdda5dca09f691192a9f6f30e8776740416fa778ac3eac41fe30c49bf353696bd90ce2559fa69"}, 0x5a) 03:58:12 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x4, 0xa}, {0x388, 0x47, 0x200, 0x8, 0x8001}}}}, 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x1f, 0xc9, 0xf9}}}, 0x6) 03:58:12 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbf}, "83bd884e6bd812c1687711d252a1b917af828065d7c68683ea5dde8d3ebef6eb8f73d00db8492cbb1ef80799d875cfd8dcbbbeea4f32f31893bc3126aeff904445163f24fa7186362643f7dfb5c406a1e4e7b38c91508a6bb04b1431afe72bd52f2f1110f9c17acf71ac953301a7c73cb38b76d6717afa06bd42eded442d6ebafd910baf258d84e09e9cbbfadc5b4ff361b94053a66b644bf7958c60dc1414692da50dc5b18049d87096cd15bbcac68d2cece674175afa4c31a7c30a32e7a7"}, 0xc3) [ 500.593862][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:12 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x4, 0xa}, {0x388, 0x47, 0x200, 0x8, 0x8001}}}}, 0x17) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x1f, 0xc9, 0xf9}}}, 0x6) 03:58:12 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@none, 0x2, 0x6, 0x9, "f7b341", 0xac2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc, 0x0, 0x40, "91aa72", 0x60, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xe3, 0x40, 0x5d, "191d31", 0x1c0}, {@any, 0x4, 0x8, 0x4, "34c9d2", 0x977, 0x9}, {@any, 0x0, 0x9, 0x5, "271bfa", 0x8}]}}}, 0x4f) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xd77f553b8f3e6668, 0xa0}, "09b83c60d92cccac102627ddf64d81233377201b409b03891513ffaef033d46bf5f5a6cf31696d9a2da0e2a06ab8e0f5373b73e002a23224504fa1c636d50eecf36512f2e3ee5ee568f76e4eea7fc32925b26f3cada0efceeb3efafc2e3cd47baec7cffc9e2e615cbc4f6f438b0948c0b306a431b25e26b816292f74fe73ee7206817f9e116b6d8b99bb0ccceb0a5a04d9ac26470aa1eb96aa213fb512c263c9"}, 0xa4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@none, 0x2, 0x6, 0x9, "f7b341", 0xac2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc, 0x0, 0x40, "91aa72", 0x60, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xe3, 0x40, 0x5d, "191d31", 0x1c0}, {@any, 0x4, 0x8, 0x4, "34c9d2", 0x977, 0x9}, {@any, 0x0, 0x9, 0x5, "271bfa", 0x8}]}}}, 0x4f) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xd77f553b8f3e6668, 0xa0}, "09b83c60d92cccac102627ddf64d81233377201b409b03891513ffaef033d46bf5f5a6cf31696d9a2da0e2a06ab8e0f5373b73e002a23224504fa1c636d50eecf36512f2e3ee5ee568f76e4eea7fc32925b26f3cada0efceeb3efafc2e3cd47baec7cffc9e2e615cbc4f6f438b0948c0b306a431b25e26b816292f74fe73ee7206817f9e116b6d8b99bb0ccceb0a5a04d9ac26470aa1eb96aa213fb512c263c9"}, 0xa4) (async) [ 500.647805][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:12 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbf}, "83bd884e6bd812c1687711d252a1b917af828065d7c68683ea5dde8d3ebef6eb8f73d00db8492cbb1ef80799d875cfd8dcbbbeea4f32f31893bc3126aeff904445163f24fa7186362643f7dfb5c406a1e4e7b38c91508a6bb04b1431afe72bd52f2f1110f9c17acf71ac953301a7c73cb38b76d6717afa06bd42eded442d6ebafd910baf258d84e09e9cbbfadc5b4ff361b94053a66b644bf7958c60dc1414692da50dc5b18049d87096cd15bbcac68d2cece674175afa4c31a7c30a32e7a7"}, 0xc3) [ 500.732608][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:12 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b320352e0299cddc7f62000000000000000000006133f9"], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:58:12 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@none, 0x2, 0x6, 0x9, "f7b341", 0xac2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc, 0x0, 0x40, "91aa72", 0x60, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xe3, 0x40, 0x5d, "191d31", 0x1c0}, {@any, 0x4, 0x8, 0x4, "34c9d2", 0x977, 0x9}, {@any, 0x0, 0x9, 0x5, "271bfa", 0x8}]}}}, 0x4f) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xd77f553b8f3e6668, 0xa0}, "09b83c60d92cccac102627ddf64d81233377201b409b03891513ffaef033d46bf5f5a6cf31696d9a2da0e2a06ab8e0f5373b73e002a23224504fa1c636d50eecf36512f2e3ee5ee568f76e4eea7fc32925b26f3cada0efceeb3efafc2e3cd47baec7cffc9e2e615cbc4f6f438b0948c0b306a431b25e26b816292f74fe73ee7206817f9e116b6d8b99bb0ccceb0a5a04d9ac26470aa1eb96aa213fb512c263c9"}, 0xa4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@none, 0x2, 0x6, 0x9, "f7b341", 0xac2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc, 0x0, 0x40, "91aa72", 0x60, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xe3, 0x40, 0x5d, "191d31", 0x1c0}, {@any, 0x4, 0x8, 0x4, "34c9d2", 0x977, 0x9}, {@any, 0x0, 0x9, 0x5, "271bfa", 0x8}]}}}, 0x4f) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xd77f553b8f3e6668, 0xa0}, "09b83c60d92cccac102627ddf64d81233377201b409b03891513ffaef033d46bf5f5a6cf31696d9a2da0e2a06ab8e0f5373b73e002a23224504fa1c636d50eecf36512f2e3ee5ee568f76e4eea7fc32925b26f3cada0efceeb3efafc2e3cd47baec7cffc9e2e615cbc4f6f438b0948c0b306a431b25e26b816292f74fe73ee7206817f9e116b6d8b99bb0ccceb0a5a04d9ac26470aa1eb96aa213fb512c263c9"}, 0xa4) (async) 03:58:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xeffdffff00000000) 03:58:12 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 500.826653][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 500.841054][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:12 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x4, 0xa}, {0x388, 0x47, 0x200, 0x8, 0x8001}}}}, 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x1f, 0xc9, 0xf9}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x4, 0xa}, {0x388, 0x47, 0x200, 0x8, 0x8001}}}}, 0x17) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x1f, 0xc9, 0xf9}}}, 0x6) (async) [ 500.961885][ T3658] Bluetooth: hci4: unexpected event 0x3e length: 363 > 260 [ 500.961920][ T3658] Bluetooth: hci4: unexpected subevent 0x0d length: 362 > 260 [ 500.977155][ T3658] Bluetooth: hci4: Malformed LE Event: 0x0d [ 500.978470][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.001068][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.153479][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.159852][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 03:58:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xe03f030000000000) 03:58:12 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x3f, 0x4}, {0x3, 0x1}}}}, 0x11) 03:58:12 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b320352e0299cddc7f62000000000000000000006133f9"], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:58:12 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:58:12 executing program 1: r0 = memfd_secret(0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2c, r2, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0xfffffffffffffdb6}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x2, 0x70bd26, 0x634a, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x42814}, 0x90) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x4, 0x8}}, @l2cap_create_chan_req={{0xc, 0x9, 0x5}, {0x400, 0x6, 0x7}}, @l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0x2, 0x81}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x2, 0x2}, {0x7}}, @l2cap_info_rsp={{0xb, 0x7, 0x4b}, {0x1, 0x8, "1b6c833507962a0b1abf79f05654962116763f37f5e140a09ed875f6566e8efffb8d01a70f2475bc15d059566c47b462575df1ea8f944d640e11775bc13669e480b71180b4115c"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x87, 0x2}, {0x9}}]}}, 0x7c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_disconn_rsp={{0x7, 0xe6, 0x4}, {0x0, 0x80}}, @l2cap_move_chan_rsp={{0xf, 0x81, 0x4}, {0x8000, 0x200}}, @l2cap_conn_rsp={{0x3, 0x80, 0x8}, {0x4, 0x4, 0x1, 0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x40, 0x2}, {0x5}}]}}, 0x2b) 03:58:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xff03000000000000) 03:58:13 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d190000009b25b320352e0299cddc7f62000000000000000000006133f9"], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:58:13 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x3f, 0x4}, {0x3, 0x1}}}}, 0x11) 03:58:13 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 501.568770][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:13 executing program 1: r0 = memfd_secret(0x80000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2c, r2, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0xfffffffffffffdb6}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x2, 0x70bd26, 0x634a, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x42814}, 0x90) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x4, 0x8}}, @l2cap_create_chan_req={{0xc, 0x9, 0x5}, {0x400, 0x6, 0x7}}, @l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0x2, 0x81}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x2, 0x2}, {0x7}}, @l2cap_info_rsp={{0xb, 0x7, 0x4b}, {0x1, 0x8, "1b6c833507962a0b1abf79f05654962116763f37f5e140a09ed875f6566e8efffb8d01a70f2475bc15d059566c47b462575df1ea8f944d640e11775bc13669e480b71180b4115c"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x87, 0x2}, {0x9}}]}}, 0x7c) (rerun: 64) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_disconn_rsp={{0x7, 0xe6, 0x4}, {0x0, 0x80}}, @l2cap_move_chan_rsp={{0xf, 0x81, 0x4}, {0x8000, 0x200}}, @l2cap_conn_rsp={{0x3, 0x80, 0x8}, {0x4, 0x4, 0x1, 0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x40, 0x2}, {0x5}}]}}, 0x2b) 03:58:13 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x5c}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x10, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0x42, "ca89c67eb8c4eba88f1a5e4dba3bdba723cf5e9a7ebeebdb4a47f4ce612563f82564de6adf1f65952a897388c1e97eac52b2f9385626bdaded23b659be71ad8ac85c"}]}}}}, 0x5f) [ 501.611409][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:13 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x5c}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x10, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0x42, "ca89c67eb8c4eba88f1a5e4dba3bdba723cf5e9a7ebeebdb4a47f4ce612563f82564de6adf1f65952a897388c1e97eac52b2f9385626bdaded23b659be71ad8ac85c"}]}}}}, 0x5f) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x5c}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x10, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0x42, "ca89c67eb8c4eba88f1a5e4dba3bdba723cf5e9a7ebeebdb4a47f4ce612563f82564de6adf1f65952a897388c1e97eac52b2f9385626bdaded23b659be71ad8ac85c"}]}}}}, 0x5f) (async) [ 501.750113][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 501.827519][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.835376][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.853176][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.860680][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.904996][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.912577][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.921238][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.928646][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.936288][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.943678][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.951212][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.958691][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.966031][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.973439][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.981007][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.989453][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 501.996800][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.004199][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.011556][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.018945][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.026264][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.034557][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.041963][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.049346][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.056655][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.064050][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.071416][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.078833][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.086150][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.093543][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.101303][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.108754][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.116078][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.123462][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.130822][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.138114][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.145906][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.153308][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.161271][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.168652][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.175983][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.183365][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.190780][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.198129][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.205513][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.213304][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.220703][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.228032][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.235529][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.242912][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.250297][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.257606][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.264941][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.273735][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.281098][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.288466][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.295849][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.303216][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.310554][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.317845][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.325589][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.336798][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.345741][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.353507][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.360924][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xe03f030000000000) 03:58:13 executing program 4: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}, 0x20) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb9}, "9fa561597b16dfce02256989d9e454d0f42f2c3b208ef130918ba39247b3294bd45cd9396af03991eebad5846b42cfbad59eb042095f14768485b0d12bd60557994946e45d7f070e113307df7e3156d077e9225c1d6486e59cdd93437c004672f394ad178338d2fe2dace823c398229989787170a626ad2dc79e5e4c098aabd57909b31b2a69638debea4fe2ea85a5ec1d359a61367b0d6e4e84eee79d0d21fa17adc74aef21c0b15d63ba01e7085f1d1534382a8626c6ee99"}, 0xbd) 03:58:13 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x3f, 0x4}, {0x3, 0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x3f, 0x4}, {0x3, 0x1}}}}, 0x11) (async) 03:58:13 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x5c}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x10, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0x42, "ca89c67eb8c4eba88f1a5e4dba3bdba723cf5e9a7ebeebdb4a47f4ce612563f82564de6adf1f65952a897388c1e97eac52b2f9385626bdaded23b659be71ad8ac85c"}]}}}}, 0x5f) 03:58:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xffffff7f00000000) 03:58:13 executing program 1: r0 = memfd_secret(0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2c, r2, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0xfffffffffffffdb6}}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x2, 0x70bd26, 0x634a, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x42814}, 0x90) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x4, 0x8}}, @l2cap_create_chan_req={{0xc, 0x9, 0x5}, {0x400, 0x6, 0x7}}, @l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0x2, 0x81}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x2, 0x2}, {0x7}}, @l2cap_info_rsp={{0xb, 0x7, 0x4b}, {0x1, 0x8, "1b6c833507962a0b1abf79f05654962116763f37f5e140a09ed875f6566e8efffb8d01a70f2475bc15d059566c47b462575df1ea8f944d640e11775bc13669e480b71180b4115c"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x87, 0x2}, {0x9}}]}}, 0x7c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_disconn_rsp={{0x7, 0xe6, 0x4}, {0x0, 0x80}}, @l2cap_move_chan_rsp={{0xf, 0x81, 0x4}, {0x8000, 0x200}}, @l2cap_conn_rsp={{0x3, 0x80, 0x8}, {0x4, 0x4, 0x1, 0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x40, 0x2}, {0x5}}]}}, 0x2b) 03:58:13 executing program 4: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}, 0x20) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb9}, "9fa561597b16dfce02256989d9e454d0f42f2c3b208ef130918ba39247b3294bd45cd9396af03991eebad5846b42cfbad59eb042095f14768485b0d12bd60557994946e45d7f070e113307df7e3156d077e9225c1d6486e59cdd93437c004672f394ad178338d2fe2dace823c398229989787170a626ad2dc79e5e4c098aabd57909b31b2a69638debea4fe2ea85a5ec1d359a61367b0d6e4e84eee79d0d21fa17adc74aef21c0b15d63ba01e7085f1d1534382a8626c6ee99"}, 0xbd) (rerun: 32) 03:58:13 executing program 5: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000240)={0x1, 0x20, @start={0x0, 0x1, "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", "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"}, [0x80000001, 0xfffffffffffffff7, 0x40, 0x7, 0xfffffffffffffffc, 0x1, 0x9, 0x401, 0x1, 0x200, 0x1, 0x3, 0x7, 0x5, 0x234, 0x400, 0x1, 0x80000000, 0xffffffffffff7fff, 0x8, 0x81, 0x4, 0x0, 0x4, 0x10001, 0x6fb, 0x100000000, 0x1, 0x7fffffff, 0xfffffffffffffffe, 0x1f, 0x2, 0x10000, 0x6, 0x7, 0xfffffffffffffffa, 0x6, 0x6, 0x9, 0x80000000, 0x9, 0x7f2a4c7c, 0x7f, 0x4, 0x8000000000000001, 0x1, 0x7, 0x7a4989bd, 0x81b5, 0xd4a, 0x0, 0x23, 0x2, 0x3f, 0x5, 0x7f, 0x81, 0x0, 0x3, 0x3, 0x8b, 0x9, 0xffffffff, 0xdd94]}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaeaaaa0000"], 0x1d) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:58:13 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x80, 0xc}, {0x400, 0x81, 0x0, 0x3, [0x1, 0x7]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x10}, "0153ba2d356ac2a24a4d0968567c3a42"}, 0x14) 03:58:13 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 502.480691][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 502.511493][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:14 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x80, 0xc}, {0x400, 0x81, 0x0, 0x3, [0x1, 0x7]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x10}, "0153ba2d356ac2a24a4d0968567c3a42"}, 0x14) 03:58:14 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 502.570209][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.634544][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 502.696300][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xc03e0000) 03:58:14 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x80, 0xc}, {0x400, 0x81, 0x0, 0x3, [0x1, 0x7]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x10}, "0153ba2d356ac2a24a4d0968567c3a42"}, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x80, 0xc}, {0x400, 0x81, 0x0, 0x3, [0x1, 0x7]}}}}, 0x19) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x10}, "0153ba2d356ac2a24a4d0968567c3a42"}, 0x14) (async) 03:58:14 executing program 5: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000240)={0x1, 0x20, @start={0x0, 0x1, "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", "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"}, [0x80000001, 0xfffffffffffffff7, 0x40, 0x7, 0xfffffffffffffffc, 0x1, 0x9, 0x401, 0x1, 0x200, 0x1, 0x3, 0x7, 0x5, 0x234, 0x400, 0x1, 0x80000000, 0xffffffffffff7fff, 0x8, 0x81, 0x4, 0x0, 0x4, 0x10001, 0x6fb, 0x100000000, 0x1, 0x7fffffff, 0xfffffffffffffffe, 0x1f, 0x2, 0x10000, 0x6, 0x7, 0xfffffffffffffffa, 0x6, 0x6, 0x9, 0x80000000, 0x9, 0x7f2a4c7c, 0x7f, 0x4, 0x8000000000000001, 0x1, 0x7, 0x7a4989bd, 0x81b5, 0xd4a, 0x0, 0x23, 0x2, 0x3f, 0x5, 0x7f, 0x81, 0x0, 0x3, 0x3, 0x8b, 0x9, 0xffffffff, 0xdd94]}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaeaaaa0000"], 0x1d) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000240)={0x1, 0x20, @start={0x0, 0x1, "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", "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"}, [0x80000001, 0xfffffffffffffff7, 0x40, 0x7, 0xfffffffffffffffc, 0x1, 0x9, 0x401, 0x1, 0x200, 0x1, 0x3, 0x7, 0x5, 0x234, 0x400, 0x1, 0x80000000, 0xffffffffffff7fff, 0x8, 0x81, 0x4, 0x0, 0x4, 0x10001, 0x6fb, 0x100000000, 0x1, 0x7fffffff, 0xfffffffffffffffe, 0x1f, 0x2, 0x10000, 0x6, 0x7, 0xfffffffffffffffa, 0x6, 0x6, 0x9, 0x80000000, 0x9, 0x7f2a4c7c, 0x7f, 0x4, 0x8000000000000001, 0x1, 0x7, 0x7a4989bd, 0x81b5, 0xd4a, 0x0, 0x23, 0x2, 0x3f, 0x5, 0x7f, 0x81, 0x0, 0x3, 0x3, 0x8b, 0x9, 0xffffffff, 0xdd94]}) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaeaaaa0000"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) 03:58:14 executing program 4: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}, 0x20) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb9}, "9fa561597b16dfce02256989d9e454d0f42f2c3b208ef130918ba39247b3294bd45cd9396af03991eebad5846b42cfbad59eb042095f14768485b0d12bd60557994946e45d7f070e113307df7e3156d077e9225c1d6486e59cdd93437c004672f394ad178338d2fe2dace823c398229989787170a626ad2dc79e5e4c098aabd57909b31b2a69638debea4fe2ea85a5ec1d359a61367b0d6e4e84eee79d0d21fa17adc74aef21c0b15d63ba01e7085f1d1534382a8626c6ee99"}, 0xbd) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}, 0x20) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb9}, "9fa561597b16dfce02256989d9e454d0f42f2c3b208ef130918ba39247b3294bd45cd9396af03991eebad5846b42cfbad59eb042095f14768485b0d12bd60557994946e45d7f070e113307df7e3156d077e9225c1d6486e59cdd93437c004672f394ad178338d2fe2dace823c398229989787170a626ad2dc79e5e4c098aabd57909b31b2a69638debea4fe2ea85a5ec1d359a61367b0d6e4e84eee79d0d21fa17adc74aef21c0b15d63ba01e7085f1d1534382a8626c6ee99"}, 0xbd) (async) 03:58:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0xffffffff00000000) 03:58:14 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:58:14 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0x8}}}}, 0x11) 03:58:14 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043eb70d03000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96100000aaaaaaaaaa1100edfd0507010006ffffffffffffac35ae2c1083c88254704c801bd534a2e632f2bfedd0cc2bc920f4ba0a1431c0ac960ad7bf0c42cd5fa85aa3e40ccbe655dca11e697c63a8cd478ff530aa5772927db9d0e9c3616bd059190272e532ef98e6b7c1c4080ff5fb6fcfda33d545f31b49daf99d3fb30b463fe8e9a1ec002f0793dc8037b303c127a729bdb7296707f9b029b9d27c6d3da702a441461e39e9ae357cdefdeaefc040289aa06bf55dc5c5cc6a30f3b009a7c03cc86c9f01000000000000000001033f0702ff0000ffffffffffff1111133d7ad5711f2f25eebcaefc1f1c6c5e"], 0x1ba) 03:58:14 executing program 5: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000240)={0x1, 0x20, @start={0x0, 0x1, "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", "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"}, [0x80000001, 0xfffffffffffffff7, 0x40, 0x7, 0xfffffffffffffffc, 0x1, 0x9, 0x401, 0x1, 0x200, 0x1, 0x3, 0x7, 0x5, 0x234, 0x400, 0x1, 0x80000000, 0xffffffffffff7fff, 0x8, 0x81, 0x4, 0x0, 0x4, 0x10001, 0x6fb, 0x100000000, 0x1, 0x7fffffff, 0xfffffffffffffffe, 0x1f, 0x2, 0x10000, 0x6, 0x7, 0xfffffffffffffffa, 0x6, 0x6, 0x9, 0x80000000, 0x9, 0x7f2a4c7c, 0x7f, 0x4, 0x8000000000000001, 0x1, 0x7, 0x7a4989bd, 0x81b5, 0xd4a, 0x0, 0x23, 0x2, 0x3f, 0x5, 0x7f, 0x81, 0x0, 0x3, 0x3, 0x8b, 0x9, 0xffffffff, 0xdd94]}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaeaaaa0000"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) [ 502.873109][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 502.890085][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 502.904466][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0x5, 0x18}}}, 0xc) 03:58:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x803e0000) 03:58:14 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0x8}}}}, 0x11) 03:58:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0x5, 0x18}}}, 0xc) 03:58:14 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1ba) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043eb70d03000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96100000aaaaaaaaaa1100edfd0507010006ffffffffffffac35ae2c1083c88254704c801bd534a2e632f2bfedd0cc2bc920f4ba0a1431c0ac960ad7bf0c42cd5fa85aa3e40ccbe655dca11e697c63a8cd478ff530aa5772927db9d0e9c3616bd059190272e532ef98e6b7c1c4080ff5fb6fcfda33d545f31b49daf99d3fb30b463fe8e9a1ec002f0793dc8037b303c127a729bdb7296707f9b029b9d27c6d3da702a441461e39e9ae357cdefdeaefc040289aa06bf55dc5c5cc6a30f3b009a7c03cc86c9f01000000000000000001033f0702ff0000ffffffffffff1111133d7ad5711f2f25eebcaefc1f1c6c5e"], 0x1ba) (async) 03:58:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x11000000) [ 503.015145][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.049612][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:14 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1ba) 03:58:14 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0x8}}}}, 0x11) (rerun: 32) 03:58:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={r2, 0x48, "324cf941c403efebeff6adb635f591174baf708de4bb8bddfb028c606e0657b37f909afc890f0fa6f0107bcd15b5e481a7954d6b13b0b0ae67257d9c10b27cc0e9bc2125659204be"}, &(0x7f0000000080)=0x50) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) 03:58:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0x5, 0x18}}}, 0xc) 03:58:14 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c095fedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) [ 503.257784][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.265343][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.272824][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.280180][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.287523][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.296123][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.303534][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.310962][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.318360][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.326063][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.333418][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.340901][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.348344][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1d190000009f25b320352e029907000000000000000000000000000000f5fadd61a4ede8861ae64a2c7da2185b1f1d0ca8874a60580187d0d935"], 0x20) 03:58:14 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c095fedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) [ 503.355696][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.363101][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.370483][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.377804][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.385132][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.392615][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.445966][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.453728][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.461150][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.474584][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={r2, 0x48, "324cf941c403efebeff6adb635f591174baf708de4bb8bddfb028c606e0657b37f909afc890f0fa6f0107bcd15b5e481a7954d6b13b0b0ae67257d9c10b27cc0e9bc2125659204be"}, &(0x7f0000000080)=0x50) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={r2, 0x48, "324cf941c403efebeff6adb635f591174baf708de4bb8bddfb028c606e0657b37f909afc890f0fa6f0107bcd15b5e481a7954d6b13b0b0ae67257d9c10b27cc0e9bc2125659204be"}, &(0x7f0000000080)=0x50) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) 03:58:14 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c095fedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) [ 503.490383][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.498742][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.506310][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.515892][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.523304][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.530729][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.538105][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1d190000009f25b320352e029907000000000000000000000000000000f5fadd61a4ede8861ae64a2c7da2185b1f1d0ca8874a60580187d0d935"], 0x20) 03:58:14 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX], 0xffffffffffffff95) [ 503.545596][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.553137][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.560545][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 503.567899][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x1000000) 03:58:15 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@un=@abs, &(0x7f0000000000)=0x80, 0x81800) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000002280)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@rand_addr=' \x01\x00', @dev={0xac, 0x14, 0x14, 0xb}, 0x2, 0xa}}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x4, 0x0, @none, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:58:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX], 0xffffffffffffff95) 03:58:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={r2, 0x48, "324cf941c403efebeff6adb635f591174baf708de4bb8bddfb028c606e0657b37f909afc890f0fa6f0107bcd15b5e481a7954d6b13b0b0ae67257d9c10b27cc0e9bc2125659204be"}, &(0x7f0000000080)=0x50) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) [ 503.716381][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1d190000009f25b320352e029907000000000000000000000000000000f5fadd61a4ede8861ae64a2c7da2185b1f1d0ca8874a60580187d0d935"], 0x20) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1d190000009f25b320352e029907000000000000000000000000000000f5fadd61a4ede8861ae64a2c7da2185b1f1d0ca8874a60580187d0d935"], 0x20) (async) 03:58:15 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xff, 0xc8}}}, 0x6) 03:58:15 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="b320352e00003b0ae000"/26], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x1f, 0x1, {0x3, 0x9, 0x6, 0xb0, 0x2}}}}, 0x17) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x2, 0xc9, 0x1, 0xffff, 0xfff7, 0x3eab}}}, 0xe) [ 503.907454][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 503.916046][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX], 0xffffffffffffff95) 03:58:15 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="b320352e00003b0ae000"/26], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x1f, 0x1, {0x3, 0x9, 0x6, 0xb0, 0x2}}}}, 0x17) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x2, 0xc9, 0x1, 0xffff, 0xfff7, 0x3eab}}}, 0xe) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="b320352e00003b0ae000"/26], 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x1f, 0x1, {0x3, 0x9, 0x6, 0xb0, 0x2}}}}, 0x17) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x2, 0xc9, 0x1, 0xffff, 0xfff7, 0x3eab}}}, 0xe) (async) 03:58:15 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xff, 0xc8}}}, 0x6) 03:58:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0affc8000700ffffffffffffaaaaaaaaaa10aaaaaaa8aa1179000800e80401"], 0x22) 03:58:15 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1b}, "2e4ff38ebcf76cbbd13c6ebb5163baa55d640fa4932931573bc7f6"}, 0x1f) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xae) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@none, 0x1, 0x4, 0x3c, "1a8218", 0xb273}, {@none, 0x9, 0x8, 0xb8, "3d89f0", 0x9}, {@none, 0x81, 0x7, 0x2, "b66fea", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x1, 0x4, "0552ad", 0xe4c2}]}}}, 0x3c) 03:58:15 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="b320352e00003b0ae000"/26], 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x1f, 0x1, {0x3, 0x9, 0x6, 0xb0, 0x2}}}}, 0x17) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x2, 0xc9, 0x1, 0xffff, 0xfff7, 0x3eab}}}, 0xe) 03:58:15 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) (async) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@un=@abs, &(0x7f0000000000)=0x80, 0x81800) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000002280)) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@rand_addr=' \x01\x00', @dev={0xac, 0x14, 0x14, 0xb}, 0x2, 0xa}}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x4, 0x0, @none, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:58:15 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xff, 0xc8}}}, 0x6) 03:58:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0affc8000700ffffffffffffaaaaaaaaaa10aaaaaaa8aa1179000800e80401"], 0x22) 03:58:15 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x10) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1b}, "2e4ff38ebcf76cbbd13c6ebb5163baa55d640fa4932931573bc7f6"}, 0x1f) (rerun: 32) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xae) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@none, 0x1, 0x4, 0x3c, "1a8218", 0xb273}, {@none, 0x9, 0x8, 0xb8, "3d89f0", 0x9}, {@none, 0x81, 0x7, 0x2, "b66fea", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x1, 0x4, "0552ad", 0xe4c2}]}}}, 0x3c) 03:58:15 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c808}, 0x800) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) 03:58:15 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1b}, "2e4ff38ebcf76cbbd13c6ebb5163baa55d640fa4932931573bc7f6"}, 0x1f) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xae) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@none, 0x1, 0x4, 0x3c, "1a8218", 0xb273}, {@none, 0x9, 0x8, 0xb8, "3d89f0", 0x9}, {@none, 0x81, 0x7, 0x2, "b66fea", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x1, 0x4, "0552ad", 0xe4c2}]}}}, 0x3c) 03:58:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0affc8000700ffffffffffffaaaaaaaaaa10aaaaaaa8aa1179000800e80401"], 0x22) 03:58:16 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x81}}}}, 0x11) [ 504.573440][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:16 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x407}}}, 0x7) 03:58:16 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) (async) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@un=@abs, &(0x7f0000000000)=0x80, 0x81800) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000002280)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@rand_addr=' \x01\x00', @dev={0xac, 0x14, 0x14, 0xb}, 0x2, 0xa}}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x4, 0x0, @none, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:58:16 executing program 2: 03:58:16 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x81}}}}, 0x11) 03:58:16 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x407}}}, 0x7) [ 504.724517][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:16 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="9d001c4b2c5a2fcf583391bca5ac9544f9bdf4b65b9fe062603f046670e061d23939d500f36a82edb62a71c9e862bef8b654076dc584abff7b58523258fd0036a3fca15e8e7cbb7a9a1c07d957d3feb6ced43224bdf06ea18d2711e0a859b69a895d1b892fbb1e6339e65bf6a6c9d5dc520ed0271dbba74706f5f1249d2b57a6a1eb9a4aa1ea27b1cf75fb7afa25404d99f2ef08fe4fa570cf3b2187ecffe47ef72dc5bcd1890219d6d13914e83c9c0364", 0xb1, 0x4000001, 0x0, 0x0) write(r0, &(0x7f0000000400)="fb", 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x1, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7, 0x3f}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}}]}}, 0x17) 03:58:16 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x81}}}}, 0x11) 03:58:16 executing program 2: [ 504.831211][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:16 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c808}, 0x800) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) (async) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c808}, 0x800) (async) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) 03:58:16 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="9d001c4b2c5a2fcf583391bca5ac9544f9bdf4b65b9fe062603f046670e061d23939d500f36a82edb62a71c9e862bef8b654076dc584abff7b58523258fd0036a3fca15e8e7cbb7a9a1c07d957d3feb6ced43224bdf06ea18d2711e0a859b69a895d1b892fbb1e6339e65bf6a6c9d5dc520ed0271dbba74706f5f1249d2b57a6a1eb9a4aa1ea27b1cf75fb7afa25404d99f2ef08fe4fa570cf3b2187ecffe47ef72dc5bcd1890219d6d13914e83c9c0364", 0xb1, 0x4000001, 0x0, 0x0) (async) write(r0, &(0x7f0000000400)="fb", 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x1, 0xc8}}}, 0x5) (rerun: 64) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7, 0x3f}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}}]}}, 0x17) 03:58:16 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x407}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x407}}}, 0x7) (async) 03:58:16 executing program 2: 03:58:16 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaaaaaa0000e526d168f5a780b4d4307bbc8adc299dd276e289fee6c31417c9c2d66ffa9bf50290603b60871559588cd9e9793d12e3aa600d67dd5b7b21306da4464b2ddc972d0fdb95c653af474d59ad082519f40388febf05ea76ca4f498c0e439d819e50455c25dc1f86607048d8d64577247eaec2dfab8b183e400defbb2e19e2ab1f5cba5d0a222f2844e78de10cd8"], 0x1d) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0x158, 0x87}, "37c82a304303d0f8ebbc41834a135e8748c5928f9b1d2eef1bd39f47b9ee8b4ceb7df2bc0bf3c9d8adabbfc9bb6e2fcc39771ad10768f5edd7c017bd8b381a3b609bd87ce44085fa60dbd4879eea38980084a008a146680799d40243f7053d7693a863be5f7e0942e5130c2e50166c9600edda45fd29eec04bd0ddaa788fd73c0bec8fcaabde31"}, 0x8b) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x49}, @l2cap_cid_signaling={{0x45}, [@l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x9, 0x9, 0xfff9, 0xffc0}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x8000}}, @l2cap_conn_req={{0x2, 0x80, 0x4}, {0xcc, 0x5}}, @l2cap_move_chan_cfm={{0x10, 0x20, 0x4}, {0x4, 0x3}}, @l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x7, 0x7, 0x226, 0x1ff}}, @l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x0, 0xd1}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x1, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0xee, 0x4}, {0xe384, 0x9}}]}}, 0x4e) 03:58:16 executing program 2: syz_emit_vhci(0x0, 0x22) [ 505.376504][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:16 executing program 2: syz_emit_vhci(0x0, 0x22) 03:58:16 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="9d001c4b2c5a2fcf583391bca5ac9544f9bdf4b65b9fe062603f046670e061d23939d500f36a82edb62a71c9e862bef8b654076dc584abff7b58523258fd0036a3fca15e8e7cbb7a9a1c07d957d3feb6ced43224bdf06ea18d2711e0a859b69a895d1b892fbb1e6339e65bf6a6c9d5dc520ed0271dbba74706f5f1249d2b57a6a1eb9a4aa1ea27b1cf75fb7afa25404d99f2ef08fe4fa570cf3b2187ecffe47ef72dc5bcd1890219d6d13914e83c9c0364", 0xb1, 0x4000001, 0x0, 0x0) write(r0, &(0x7f0000000400)="fb", 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x1, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7, 0x3f}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}}]}}, 0x17) pipe(&(0x7f0000000080)) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="9d001c4b2c5a2fcf583391bca5ac9544f9bdf4b65b9fe062603f046670e061d23939d500f36a82edb62a71c9e862bef8b654076dc584abff7b58523258fd0036a3fca15e8e7cbb7a9a1c07d957d3feb6ced43224bdf06ea18d2711e0a859b69a895d1b892fbb1e6339e65bf6a6c9d5dc520ed0271dbba74706f5f1249d2b57a6a1eb9a4aa1ea27b1cf75fb7afa25404d99f2ef08fe4fa570cf3b2187ecffe47ef72dc5bcd1890219d6d13914e83c9c0364", 0xb1, 0x4000001, 0x0, 0x0) (async) write(r0, &(0x7f0000000400)="fb", 0x1) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x1, 0xc8}}}, 0x5) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x7, 0x3f}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}}]}}, 0x17) (async) 03:58:16 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaaaaaa0000e526d168f5a780b4d4307bbc8adc299dd276e289fee6c31417c9c2d66ffa9bf50290603b60871559588cd9e9793d12e3aa600d67dd5b7b21306da4464b2ddc972d0fdb95c653af474d59ad082519f40388febf05ea76ca4f498c0e439d819e50455c25dc1f86607048d8d64577247eaec2dfab8b183e400defbb2e19e2ab1f5cba5d0a222f2844e78de10cd8"], 0x1d) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0x158, 0x87}, "37c82a304303d0f8ebbc41834a135e8748c5928f9b1d2eef1bd39f47b9ee8b4ceb7df2bc0bf3c9d8adabbfc9bb6e2fcc39771ad10768f5edd7c017bd8b381a3b609bd87ce44085fa60dbd4879eea38980084a008a146680799d40243f7053d7693a863be5f7e0942e5130c2e50166c9600edda45fd29eec04bd0ddaa788fd73c0bec8fcaabde31"}, 0x8b) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x49}, @l2cap_cid_signaling={{0x45}, [@l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x9, 0x9, 0xfff9, 0xffc0}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x8000}}, @l2cap_conn_req={{0x2, 0x80, 0x4}, {0xcc, 0x5}}, @l2cap_move_chan_cfm={{0x10, 0x20, 0x4}, {0x4, 0x3}}, @l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x7, 0x7, 0x226, 0x1ff}}, @l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x0, 0xd1}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x1, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0xee, 0x4}, {0xe384, 0x9}}]}}, 0x4e) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaaaaaa0000e526d168f5a780b4d4307bbc8adc299dd276e289fee6c31417c9c2d66ffa9bf50290603b60871559588cd9e9793d12e3aa600d67dd5b7b21306da4464b2ddc972d0fdb95c653af474d59ad082519f40388febf05ea76ca4f498c0e439d819e50455c25dc1f86607048d8d64577247eaec2dfab8b183e400defbb2e19e2ab1f5cba5d0a222f2844e78de10cd8"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0x158, 0x87}, "37c82a304303d0f8ebbc41834a135e8748c5928f9b1d2eef1bd39f47b9ee8b4ceb7df2bc0bf3c9d8adabbfc9bb6e2fcc39771ad10768f5edd7c017bd8b381a3b609bd87ce44085fa60dbd4879eea38980084a008a146680799d40243f7053d7693a863be5f7e0942e5130c2e50166c9600edda45fd29eec04bd0ddaa788fd73c0bec8fcaabde31"}, 0x8b) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x49}, @l2cap_cid_signaling={{0x45}, [@l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x9, 0x9, 0xfff9, 0xffc0}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x8000}}, @l2cap_conn_req={{0x2, 0x80, 0x4}, {0xcc, 0x5}}, @l2cap_move_chan_cfm={{0x10, 0x20, 0x4}, {0x4, 0x3}}, @l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x7, 0x7, 0x226, 0x1ff}}, @l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x0, 0xd1}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x1, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0xee, 0x4}, {0xe384, 0x9}}]}}, 0x4e) (async) [ 505.423095][ T3658] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:16 executing program 1: syz_io_uring_setup(0x2b20, &(0x7f0000000040)={0x0, 0x52fd, 0x4, 0x3, 0xeb}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d7a19d45848a1810fef"], 0x10) 03:58:16 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xcd) 03:58:16 executing program 2: syz_emit_vhci(0x0, 0x22) [ 505.533787][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:17 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c808}, 0x800) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000080)) (async) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) (async) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c808}, 0x800) (async) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) 03:58:17 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000000000aaaaaaaaaa0000e526d168f5a780b4d4307bbc8adc299dd276e289fee6c31417c9c2d66ffa9bf50290603b60871559588cd9e9793d12e3aa600d67dd5b7b21306da4464b2ddc972d0fdb95c653af474d59ad082519f40388febf05ea76ca4f498c0e439d819e50455c25dc1f86607048d8d64577247eaec2dfab8b183e400defbb2e19e2ab1f5cba5d0a222f2844e78de10cd8"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0x158, 0x87}, "37c82a304303d0f8ebbc41834a135e8748c5928f9b1d2eef1bd39f47b9ee8b4ceb7df2bc0bf3c9d8adabbfc9bb6e2fcc39771ad10768f5edd7c017bd8b381a3b609bd87ce44085fa60dbd4879eea38980084a008a146680799d40243f7053d7693a863be5f7e0942e5130c2e50166c9600edda45fd29eec04bd0ddaa788fd73c0bec8fcaabde31"}, 0x8b) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x49}, @l2cap_cid_signaling={{0x45}, [@l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x9, 0x9, 0xfff9, 0xffc0}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x8000}}, @l2cap_conn_req={{0x2, 0x80, 0x4}, {0xcc, 0x5}}, @l2cap_move_chan_cfm={{0x10, 0x20, 0x4}, {0x4, 0x3}}, @l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x7, 0x7, 0x226, 0x1ff}}, @l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x0, 0xd1}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x1, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0xee, 0x4}, {0xe384, 0x9}}]}}, 0x4e) 03:58:17 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96684387cf9ecf7313ee67ee80e2aa3f942bee2d7063d83af78a7d354d5cc51cc45b63c5f7c17d00af63e8fe6e40dd48cf1ce81b4e06fd5b4fcb97c25f5d077ba16214235781a429251113d592613d94bd4377c2aee1eb75df568a29ec4a3668d2e91faba31e30ddb0ff2b1ad02c35d451b0e409bde348b5bf752360bf7a2fef8eb68c53c102efc7dc210cffc1b890d3d0823a2486f91501430f96e5bc4947e61acdc59d9f92725b22b776ec0dc13dcab40cd84f31e1f09e2f4e1ba53f6f36171c999f188121370f3d2633b4cb9f7e66d52d627bd4bc85807be3bbf860e6aa815960301bd701b2a3ffb857da"], 0xcd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xcd) (async) 03:58:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x22) 03:58:17 executing program 1: syz_io_uring_setup(0x2b20, &(0x7f0000000040)={0x0, 0x52fd, 0x4, 0x3, 0xeb}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d7a19d45848a1810fef"], 0x10) syz_io_uring_setup(0x2b20, &(0x7f0000000040)={0x0, 0x52fd, 0x4, 0x3, 0xeb}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d7a19d45848a1810fef"], 0x10) (async) 03:58:17 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xcd) 03:58:17 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x4b}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0x31, "0770046046a1d845b8930ab35018c83cb13ce541064dd96c75a11835931d2f3d6ea4fe1b6248f96bbd261b460ccd60ba4e"}]}}}}, 0x4e) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5e}, "683a5cd69561beb718dd15a812eac954721f801e3a2c3ea0c073813c91229a83b7ac4f4160e07585baff70dc549b5a0e2c03f1d01b850cee67d4d60fd075c23453c2766fc65e97d8968a8a3eb4b72ee1cb4a5e6c44d91b9c52e17f1d2e3d"}, 0x62) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x1}}}, 0xa) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:58:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x22) 03:58:17 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfc}, "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"}, 0x100) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5c}, "a4b62a065ecc3b2f5afa4cbedf2201192a2992a92d92aec96db52170477487cf88f597e9e2330052832f948e03c12bb429b2515eea95e2a2e07b19984cfb4f2a96c28c65eece685be704a3bc75a1f95b365e0695759b9f74c732866d"}, 0x60) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) [ 505.725364][ T3658] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:17 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x20) 03:58:17 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfc}, "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"}, 0x100) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5c}, "a4b62a065ecc3b2f5afa4cbedf2201192a2992a92d92aec96db52170477487cf88f597e9e2330052832f948e03c12bb429b2515eea95e2a2e07b19984cfb4f2a96c28c65eece685be704a3bc75a1f95b365e0695759b9f74c732866d"}, 0x60) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfc}, "49a9775e4fcb78f13bfac24cf0e99e64a4073ba08e7d935c10171b15002400a1e34f77c512171c71b79b5c6c17c31d8f2d5fae321eb9d0ecc69ee619c76f7472c39dd4c2a9e7a310b425aeb4577e946e37ec9344b3080e6117d532b86cf19e7c2bb02ca4e33c07be1aecb160d4b1098826d67d289aeb285f76480422b3737cc2628f16d8bdca66b65c42eeee5ab1f643ea33fc5c3ab65fbb989c55b641eb8145e699684d4655a244b3622864ffadc276e2b06599a94941e68c0929062498efbdf1f07330c51232984997e000354fefd846394c0ed16dbc17e62061945dad2b6cc6de61b43d85e8efc7f9bd9566f08f56d657816c4f5879ac1ce3b8e3"}, 0x100) (async) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5c}, "a4b62a065ecc3b2f5afa4cbedf2201192a2992a92d92aec96db52170477487cf88f597e9e2330052832f948e03c12bb429b2515eea95e2a2e07b19984cfb4f2a96c28c65eece685be704a3bc75a1f95b365e0695759b9f74c732866d"}, 0x60) (async) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) (async) 03:58:17 executing program 1: syz_io_uring_setup(0x2b20, &(0x7f0000000040)={0x0, 0x52fd, 0x4, 0x3, 0xeb}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d7a19d45848a1810fef"], 0x10) 03:58:17 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x4b}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0x31, "0770046046a1d845b8930ab35018c83cb13ce541064dd96c75a11835931d2f3d6ea4fe1b6248f96bbd261b460ccd60ba4e"}]}}}}, 0x4e) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5e}, "683a5cd69561beb718dd15a812eac954721f801e3a2c3ea0c073813c91229a83b7ac4f4160e07585baff70dc549b5a0e2c03f1d01b850cee67d4d60fd075c23453c2766fc65e97d8968a8a3eb4b72ee1cb4a5e6c44d91b9c52e17f1d2e3d"}, 0x62) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x1}}}, 0xa) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:58:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x22) 03:58:17 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x20) 03:58:17 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r2, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delchain={0x2c, 0x65, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x1}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x24}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c004}, 0xc0d1) 03:58:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x22) 03:58:17 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x20) 03:58:17 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfc}, "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"}, 0x100) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5c}, "a4b62a065ecc3b2f5afa4cbedf2201192a2992a92d92aec96db52170477487cf88f597e9e2330052832f948e03c12bb429b2515eea95e2a2e07b19984cfb4f2a96c28c65eece685be704a3bc75a1f95b365e0695759b9f74c732866d"}, 0x60) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfc}, "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"}, 0x100) (async) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5c}, "a4b62a065ecc3b2f5afa4cbedf2201192a2992a92d92aec96db52170477487cf88f597e9e2330052832f948e03c12bb429b2515eea95e2a2e07b19984cfb4f2a96c28c65eece685be704a3bc75a1f95b365e0695759b9f74c732866d"}, 0x60) (async) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) (async) 03:58:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x22) 03:58:17 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x4b}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0x31, "0770046046a1d845b8930ab35018c83cb13ce541064dd96c75a11835931d2f3d6ea4fe1b6248f96bbd261b460ccd60ba4e"}]}}}}, 0x4e) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5e}, "683a5cd69561beb718dd15a812eac954721f801e3a2c3ea0c073813c91229a83b7ac4f4160e07585baff70dc549b5a0e2c03f1d01b850cee67d4d60fd075c23453c2766fc65e97d8968a8a3eb4b72ee1cb4a5e6c44d91b9c52e17f1d2e3d"}, 0x62) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x1}}}, 0xa) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 505.852349][ T3658] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 505.949032][ T3658] Bluetooth: hci5: SCO packet for unknown connection handle 0 03:58:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x22) 03:58:17 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x20) 03:58:17 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x20) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1d5d0000009b25b320352e0299cddc7f6200000000000000000000f3ff00f9a977f383d8ee60d500a830afc78ab9553b00e0dd378a1fb188f548f131ef8277c8299295fb649ea6a09392d6e2ec63789279fe974365dd763e2e3ced4367f9c7237c0b99b2429fc45edd0026b99a5aa218d3df9a904eaad58a732dfe74104f577b2ee4792f266456fba6859aa9f95168641c3401f8bfc4629935c013dd74c31dd07149080b4f8a3ade946d7b45197bd014966258466ac65d097e203e738d975beaa5d44c18274cbab485ad3ddfe029fadb5a2143a620a6c719afae44a7cbced85b7462f11a5fdf55f27542a20a793c862737979ee9d75aca89a9e0"], 0x20) (async) 03:58:17 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa}, "cfa3f8683be0459bc829"}, 0xe) 03:58:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) 03:58:17 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r2, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delchain={0x2c, 0x65, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x1}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x24}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c004}, 0xc0d1) 03:58:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0affc8000700ffffffffffffaaaa"], 0x22) 03:58:17 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x20) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x20) (async) 03:58:17 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa}, "cfa3f8683be0459bc829"}, 0xe) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa}, "cfa3f8683be0459bc829"}, 0xe) (async) 03:58:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) pipe(&(0x7f0000000080)) (async) write(r0, &(0x7f0000000400)="fb", 0x1) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) 03:58:17 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd8}, "7de10e8da55e62fd182241d27f29423a3c5bc6b37bc0e95a34dd73760090d10c728e2c1dfbf7aa83150e8d235b2fac120fda57823d32626a16d05c1d48c8d60dfd137bf62ebcd590fda8a5da6e858f9e982587f56a40a828482a68e6c50fb9110b2526e3de08c1b26983c483ef81ffd0edd7c83966d463abefafe50ca5936493526a9d68ffe73ef41eaed8d00302b64da97db09ecaab9804e15f7a814dad7eb3a6aaa49e5f3a0ffb9a633d64cf327b5899cd1d11ba48d0f957e5d7a191a2bb21b0708c042d704c5ed1813ef0a26fcd8a461645caa135b85b"}, 0xdc) 03:58:17 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r2, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delchain={0x2c, 0x65, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x1}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x24}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c004}, 0xc0d1) pipe(&(0x7f0000000200)) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000200007000000", @ANYRES32=r2, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delchain={0x2c, 0x65, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x1}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x24}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c004}, 0xc0d1) (async) 03:58:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x22) 03:58:17 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa}, "cfa3f8683be0459bc829"}, 0xe) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa}, "cfa3f8683be0459bc829"}, 0xe) (async) 03:58:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x22) 03:58:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x22) 03:58:17 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd8}, "7de10e8da55e62fd182241d27f29423a3c5bc6b37bc0e95a34dd73760090d10c728e2c1dfbf7aa83150e8d235b2fac120fda57823d32626a16d05c1d48c8d60dfd137bf62ebcd590fda8a5da6e858f9e982587f56a40a828482a68e6c50fb9110b2526e3de08c1b26983c483ef81ffd0edd7c83966d463abefafe50ca5936493526a9d68ffe73ef41eaed8d00302b64da97db09ecaab9804e15f7a814dad7eb3a6aaa49e5f3a0ffb9a633d64cf327b5899cd1d11ba48d0f957e5d7a191a2bb21b0708c042d704c5ed1813ef0a26fcd8a461645caa135b85b"}, 0xdc) (rerun: 32) [ 505.980529][ T3658] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 506.272597][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000400)="fb", 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) pipe(&(0x7f0000000080)) (async) write(r0, &(0x7f0000000400)="fb", 0x1) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) 03:58:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0affc8000700"], 0x22) [ 506.341628][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.351687][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.400022][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.407905][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.415766][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.424282][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.432075][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.440229][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:17 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd8}, "7de10e8da55e62fd182241d27f29423a3c5bc6b37bc0e95a34dd73760090d10c728e2c1dfbf7aa83150e8d235b2fac120fda57823d32626a16d05c1d48c8d60dfd137bf62ebcd590fda8a5da6e858f9e982587f56a40a828482a68e6c50fb9110b2526e3de08c1b26983c483ef81ffd0edd7c83966d463abefafe50ca5936493526a9d68ffe73ef41eaed8d00302b64da97db09ecaab9804e15f7a814dad7eb3a6aaa49e5f3a0ffb9a633d64cf327b5899cd1d11ba48d0f957e5d7a191a2bb21b0708c042d704c5ed1813ef0a26fcd8a461645caa135b85b"}, 0xdc) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd8}, "7de10e8da55e62fd182241d27f29423a3c5bc6b37bc0e95a34dd73760090d10c728e2c1dfbf7aa83150e8d235b2fac120fda57823d32626a16d05c1d48c8d60dfd137bf62ebcd590fda8a5da6e858f9e982587f56a40a828482a68e6c50fb9110b2526e3de08c1b26983c483ef81ffd0edd7c83966d463abefafe50ca5936493526a9d68ffe73ef41eaed8d00302b64da97db09ecaab9804e15f7a814dad7eb3a6aaa49e5f3a0ffb9a633d64cf327b5899cd1d11ba48d0f957e5d7a191a2bb21b0708c042d704c5ed1813ef0a26fcd8a461645caa135b85b"}, 0xdc) (async) [ 506.448018][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.455858][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.463734][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.473476][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.481467][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.489424][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:17 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e5403000c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff74d0f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff14027233a27ddb393fb77b5a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x32}, "6b6fb421886cb798572be27c763e7b6076d9eff0f7abb533183f02d0241740ec54ca0108726f8f426745dc2d895ec252d7ab"}, 0x36) 03:58:17 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c930570053000100054011000700018000000501000702ff0702020cb404003400010009000102ffff0202040006100000090004000000080000000400000007020101050101010204000409048009ff0f0200080011010200ff0091cecbb56fd0e67ea9c7b624a89caadc25d9d7cafb85a929cbaccc3cb3e43ad85bdf3c1a11849442bd3e90ebc2dce5ae978c71e0c73d91360c32a7eb5ac55c1e223e5cc77f93c92c175c3a1e26585e0da3414c2a9b8cb321c60d8c610e9930a1def9efa6f89645eaa580e57cb12e071a60bb37dbec0180778fee22a19837de306edb33f1b953cb"], 0x5c) 03:58:17 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) [ 506.497138][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.505255][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.513076][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.520998][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.528748][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.536637][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.544384][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.552541][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.560295][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.568046][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.576023][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.583904][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:18 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0affc8000700"], 0x22) [ 506.593610][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.601432][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.609390][ T3647] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 506.616933][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.624803][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.632563][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:18 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c930570053000100054011000700018000000501000702ff0702020cb404003400010009000102ffff0202040006100000090004000000080000000400000007020101050101010204000409048009ff0f0200080011010200ff0091cecbb56fd0e67ea9c7b624a89caadc25d9d7cafb85a929cbaccc3cb3e43ad85bdf3c1a11849442bd3e90ebc2dce5ae978c71e0c73d91360c32a7eb5ac55c1e223e5cc77f93c92c175c3a1e26585e0da3414c2a9b8cb321c60d8c610e9930a1def9efa6f89645eaa580e57cb12e071a60bb37dbec0180778fee22a19837de306edb33f1b953cb"], 0x5c) 03:58:18 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03001d190000009b25b320352e030000007f6200000000000000000000000000b2f23a7858d16cf43c5c32289cd0a434b3231f62d2bacd611717a5e25045ec8a882e14abde7e83f6207d07c79f8abd1e1329380a819be4070d6b2348737e926c8487a167e9b222c6bf3ba5e6897e3f5c82e128ff63e4f91d63"], 0x20) [ 506.644249][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.652048][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.659852][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 506.667639][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:18 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e5403000c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff74d0f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff14027233a27ddb393fb77b5a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x32}, "6b6fb421886cb798572be27c763e7b6076d9eff0f7abb533183f02d0241740ec54ca0108726f8f426745dc2d895ec252d7ab"}, 0x36) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e5403000c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff74d0f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff14027233a27ddb393fb77b5a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x32}, "6b6fb421886cb798572be27c763e7b6076d9eff0f7abb533183f02d0241740ec54ca0108726f8f426745dc2d895ec252d7ab"}, 0x36) (async) 03:58:18 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:58:18 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x22) 03:58:18 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043eca0d01000000ffffffffffff0000000000000000aaaaaaaaaa00b0aef1e3fc072e5403000c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff74d0f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff14027233a27ddb393fb77b5a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"], 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x32}, "6b6fb421886cb798572be27c763e7b6076d9eff0f7abb533183f02d0241740ec54ca0108726f8f426745dc2d895ec252d7ab"}, 0x36) 03:58:18 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03001d190000009b25b320352e030000007f6200000000000000000000000000b2f23a7858d16cf43c5c32289cd0a434b3231f62d2bacd611717a5e25045ec8a882e14abde7e83f6207d07c79f8abd1e1329380a819be4070d6b2348737e926c8487a167e9b222c6bf3ba5e6897e3f5c82e128ff63e4f91d63"], 0x20) [ 506.813591][ T3647] Bluetooth: hci5: SCO packet for unknown connection handle 3328 [ 506.831061][ T3647] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 03:58:18 executing program 5: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) [ 506.894753][ T3647] Bluetooth: hci4: Received unexpected HCI Event 0x00 03:58:18 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c930570053000100054011000700018000000501000702ff0702020cb404003400010009000102ffff0202040006100000090004000000080000000400000007020101050101010204000409048009ff0f0200080011010200ff0091cecbb56fd0e67ea9c7b624a89caadc25d9d7cafb85a929cbaccc3cb3e43ad85bdf3c1a11849442bd3e90ebc2dce5ae978c71e0c73d91360c32a7eb5ac55c1e223e5cc77f93c92c175c3a1e26585e0da3414c2a9b8cb321c60d8c610e9930a1def9efa6f89645eaa580e57cb12e071a60bb37dbec0180778fee22a19837de306edb33f1b953cb"], 0x5c) 03:58:18 executing program 0: sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x178, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x5e}}}}, [@NL80211_ATTR_IE={0x11d, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x8c, 0x4c}}, @preq={0x82, 0x67, @not_ext={{0x1}, 0x0, 0x6, 0x5, @device_b, 0x8001, "", 0x2, 0x22ab, 0x7, [{{}, @device_a, 0x1}, {{0x1}, @device_b, 0x7ff}, {{0x1}, @broadcast, 0xff}, {{}, @broadcast, 0x7fff}, {{0x0, 0x0, 0x1}, @device_b, 0xffffff81}, {{0x1, 0x0, 0x1}, @device_a, 0x4f}, {{}, @device_a, 0x7fff}]}}, @tim={0x5, 0x57, {0x4, 0x60, 0x9, "f60bf4a66bc69123080f5d497e3a05ad95e7820a0b3e3553903293586ba193c74da6b767bae4a2e97ad02e040892a5fc3b2185f1a08bedcd9d4465993f4c0b2fb69b4674b85d2ed172c9b941a84ef6aed8c25938"}}, @chsw_timing={0x68, 0x4, {0x80, 0x4}}, @peer_mgmt={0x75, 0x6, {0x0, 0x3, @void, @val=0xa, @void}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1}}, @link_id={0x65, 0x12, {@random="99b700cd9246", @device_a, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x3, 0xff, @device_a, 0x6, @broadcast, 0x2, 0xabe7bdd, @device_a, 0x4}}]}, @NL80211_ATTR_KEYS={0x38, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x6, 0x4, "89cf"}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) 03:58:18 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03001d190000009b25b320352e030000007f6200000000000000000000000000b2f23a7858d16cf43c5c32289cd0a434b3231f62d2bacd611717a5e25045ec8a882e14abde7e83f6207d07c79f8abd1e1329380a819be4070d6b2348737e926c8487a167e9b222c6bf3ba5e6897e3f5c82e128ff63e4f91d63"], 0x20) 03:58:18 executing program 0: sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x178, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x5e}}}}, [@NL80211_ATTR_IE={0x11d, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x8c, 0x4c}}, @preq={0x82, 0x67, @not_ext={{0x1}, 0x0, 0x6, 0x5, @device_b, 0x8001, "", 0x2, 0x22ab, 0x7, [{{}, @device_a, 0x1}, {{0x1}, @device_b, 0x7ff}, {{0x1}, @broadcast, 0xff}, {{}, @broadcast, 0x7fff}, {{0x0, 0x0, 0x1}, @device_b, 0xffffff81}, {{0x1, 0x0, 0x1}, @device_a, 0x4f}, {{}, @device_a, 0x7fff}]}}, @tim={0x5, 0x57, {0x4, 0x60, 0x9, "f60bf4a66bc69123080f5d497e3a05ad95e7820a0b3e3553903293586ba193c74da6b767bae4a2e97ad02e040892a5fc3b2185f1a08bedcd9d4465993f4c0b2fb69b4674b85d2ed172c9b941a84ef6aed8c25938"}}, @chsw_timing={0x68, 0x4, {0x80, 0x4}}, @peer_mgmt={0x75, 0x6, {0x0, 0x3, @void, @val=0xa, @void}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1}}, @link_id={0x65, 0x12, {@random="99b700cd9246", @device_a, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x3, 0xff, @device_a, 0x6, @broadcast, 0x2, 0xabe7bdd, @device_a, 0x4}}]}, @NL80211_ATTR_KEYS={0x38, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x6, 0x4, "89cf"}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x178, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x5e}}}}, [@NL80211_ATTR_IE={0x11d, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x8c, 0x4c}}, @preq={0x82, 0x67, @not_ext={{0x1}, 0x0, 0x6, 0x5, @device_b, 0x8001, "", 0x2, 0x22ab, 0x7, [{{}, @device_a, 0x1}, {{0x1}, @device_b, 0x7ff}, {{0x1}, @broadcast, 0xff}, {{}, @broadcast, 0x7fff}, {{0x0, 0x0, 0x1}, @device_b, 0xffffff81}, {{0x1, 0x0, 0x1}, @device_a, 0x4f}, {{}, @device_a, 0x7fff}]}}, @tim={0x5, 0x57, {0x4, 0x60, 0x9, "f60bf4a66bc69123080f5d497e3a05ad95e7820a0b3e3553903293586ba193c74da6b767bae4a2e97ad02e040892a5fc3b2185f1a08bedcd9d4465993f4c0b2fb69b4674b85d2ed172c9b941a84ef6aed8c25938"}}, @chsw_timing={0x68, 0x4, {0x80, 0x4}}, @peer_mgmt={0x75, 0x6, {0x0, 0x3, @void, @val=0xa, @void}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1}}, @link_id={0x65, 0x12, {@random="99b700cd9246", @device_a, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x3, 0xff, @device_a, 0x6, @broadcast, 0x2, 0xabe7bdd, @device_a, 0x4}}]}, @NL80211_ATTR_KEYS={0x38, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x6, 0x4, "89cf"}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) (async) 03:58:18 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x22) 03:58:18 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) write$binfmt_elf64(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003"], 0xb0) close(r0) fcntl$getown(r0, 0x9) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x4000, 0x11d000}) r2 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x116) write$binfmt_elf64(r2, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0xff, 0x80, 0x5, 0x2, 0x6, 0x0, 0x2dd, 0x40, 0x3da, 0x0, 0x5, 0x38, 0x2, 0x1, 0x6, 0xffff}, [{0x6, 0x4, 0x8001, 0xb7, 0x767, 0x401, 0x8, 0x80}], "f5e6be080f8e8be5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa80) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) [ 506.939167][ T3647] Bluetooth: hci5: SCO packet for unknown connection handle 3328 [ 507.017996][ T3647] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 507.033105][ T3662] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 507.045330][ T3647] Bluetooth: hci5: SCO packet for unknown connection handle 3328 [ 507.065101][T15056] process 'syz-executor.1' launched './file0' with NULL argv: empty string added 03:58:18 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="ffff5ffed50000000000ac0f948956de22"], 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x387f0ccc6b85f846}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80074a0100137e4d82c46afd2874ac2f7743be2a6eec1251da48acf67361c6dcbf6d0900be31fb7544b21e32f6757a6c38f424cfa5039f3c404af53b745ce9d299ccac19be4d6bf68d0abad8485f27761647c05252d4ac40988c2f5b4e14f30e38d2ba2c9e84cb6151bd065d960081d0ffe5386bc785b"], 0x78) 03:58:18 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16], 0x20) 03:58:18 executing program 0: sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x178, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x5e}}}}, [@NL80211_ATTR_IE={0x11d, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x8c, 0x4c}}, @preq={0x82, 0x67, @not_ext={{0x1}, 0x0, 0x6, 0x5, @device_b, 0x8001, "", 0x2, 0x22ab, 0x7, [{{}, @device_a, 0x1}, {{0x1}, @device_b, 0x7ff}, {{0x1}, @broadcast, 0xff}, {{}, @broadcast, 0x7fff}, {{0x0, 0x0, 0x1}, @device_b, 0xffffff81}, {{0x1, 0x0, 0x1}, @device_a, 0x4f}, {{}, @device_a, 0x7fff}]}}, @tim={0x5, 0x57, {0x4, 0x60, 0x9, "f60bf4a66bc69123080f5d497e3a05ad95e7820a0b3e3553903293586ba193c74da6b767bae4a2e97ad02e040892a5fc3b2185f1a08bedcd9d4465993f4c0b2fb69b4674b85d2ed172c9b941a84ef6aed8c25938"}}, @chsw_timing={0x68, 0x4, {0x80, 0x4}}, @peer_mgmt={0x75, 0x6, {0x0, 0x3, @void, @val=0xa, @void}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1}}, @link_id={0x65, 0x12, {@random="99b700cd9246", @device_a, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x3, 0xff, @device_a, 0x6, @broadcast, 0x2, 0xabe7bdd, @device_a, 0x4}}]}, @NL80211_ATTR_KEYS={0x38, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x6, 0x4, "89cf"}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) 03:58:18 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x22) 03:58:18 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16], 0x20) 03:58:18 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="ffff5ffed50000000000ac0f948956de22"], 0x1d) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x387f0ccc6b85f846}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80074a0100137e4d82c46afd2874ac2f7743be2a6eec1251da48acf67361c6dcbf6d0900be31fb7544b21e32f6757a6c38f424cfa5039f3c404af53b745ce9d299ccac19be4d6bf68d0abad8485f27761647c05252d4ac40988c2f5b4e14f30e38d2ba2c9e84cb6151bd065d960081d0ffe5386bc785b"], 0x78) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="ffff5ffed50000000000ac0f948956de22"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x387f0ccc6b85f846}}, 0x4) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80074a0100137e4d82c46afd2874ac2f7743be2a6eec1251da48acf67361c6dcbf6d0900be31fb7544b21e32f6757a6c38f424cfa5039f3c404af53b745ce9d299ccac19be4d6bf68d0abad8485f27761647c05252d4ac40988c2f5b4e14f30e38d2ba2c9e84cb6151bd065d960081d0ffe5386bc785b"], 0x78) (async) 03:58:18 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) write$binfmt_elf64(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003"], 0xb0) (async) close(r0) (async) fcntl$getown(r0, 0x9) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x4000, 0x11d000}) (async) r2 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x116) write$binfmt_elf64(r2, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0xff, 0x80, 0x5, 0x2, 0x6, 0x0, 0x2dd, 0x40, 0x3da, 0x0, 0x5, 0x38, 0x2, 0x1, 0x6, 0xffff}, [{0x6, 0x4, 0x8001, 0xb7, 0x767, 0x401, 0x8, 0x80}], "f5e6be080f8e8be5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa80) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) 03:58:18 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0aff"], 0x22) [ 507.223639][ T3647] Bluetooth: hci4: Received unexpected HCI Event 0x00 03:58:18 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16], 0x20) 03:58:18 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x3f}, @l2cap_cid_signaling={{0x3b}, [@l2cap_conf_rsp={{0x5, 0x0, 0x37}, {0x396, 0x8, 0x3ff, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x80, 0x1, 0xdb0c, 0x8, 0x7}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x20, 0x1000, 0x0, 0x6}}, @l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x9}]}}]}}, 0x44) 03:58:18 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x3f}, @l2cap_cid_signaling={{0x3b}, [@l2cap_conf_rsp={{0x5, 0x0, 0x37}, {0x396, 0x8, 0x3ff, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x80, 0x1, 0xdb0c, 0x8, 0x7}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x20, 0x1000, 0x0, 0x6}}, @l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x9}]}}]}}, 0x44) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x3f}, @l2cap_cid_signaling={{0x3b}, [@l2cap_conf_rsp={{0x5, 0x0, 0x37}, {0x396, 0x8, 0x3ff, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x80, 0x1, 0xdb0c, 0x8, 0x7}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x20, 0x1000, 0x0, 0x6}}, @l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x9}]}}]}}, 0x44) (async) 03:58:18 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9902d002900010011d5080073008000e0ff06000e3103000900aa1631555be26bf093936e0910090400090001000f010420ff030600ef488d3003906c36b2867856ce486d0559c5c0b1221707ceffc8726141466f7e7a22ca9580e6f5bea062de9d60b15864"], 0x32) 03:58:18 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="ffff5ffed50000000000ac0f948956de22"], 0x1d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x387f0ccc6b85f846}}, 0x4) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80074a0100137e4d82c46afd2874ac2f7743be2a6eec1251da48acf67361c6dcbf6d0900be31fb7544b21e32f6757a6c38f424cfa5039f3c404af53b745ce9d299ccac19be4d6bf68d0abad8485f27761647c05252d4ac40988c2f5b4e14f30e38d2ba2c9e84cb6151bd065d960081d0ffe5386bc785b"], 0x78) 03:58:18 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) write$binfmt_elf64(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003"], 0xb0) (async) close(r0) fcntl$getown(r0, 0x9) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) (rerun: 32) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x200) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x4000, 0x11d000}) r2 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x116) write$binfmt_elf64(r2, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0xff, 0x80, 0x5, 0x2, 0x6, 0x0, 0x2dd, 0x40, 0x3da, 0x0, 0x5, 0x38, 0x2, 0x1, 0x6, 0xffff}, [{0x6, 0x4, 0x8001, 0xb7, 0x767, 0x401, 0x8, 0x80}], "f5e6be080f8e8be5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa80) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d04"], 0x10) 03:58:18 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x3f}, @l2cap_cid_signaling={{0x3b}, [@l2cap_conf_rsp={{0x5, 0x0, 0x37}, {0x396, 0x8, 0x3ff, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x80, 0x1, 0xdb0c, 0x8, 0x7}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x20, 0x1000, 0x0, 0x6}}, @l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x9}]}}]}}, 0x44) 03:58:18 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9902d002900010011d5080073008000e0ff06000e3103000900aa1631555be26bf093936e0910090400090001000f010420ff030600ef488d3003906c36b2867856ce486d0559c5c0b1221707ceffc8726141466f7e7a22ca9580e6f5bea062de9d60b15864"], 0x32) [ 507.469420][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:18 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x22) 03:58:19 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9902d002900010011d5080073008000e0ff06000e3103000900aa1631555be26bf093936e0910090400090001000f010420ff030600ef488d3003906c36b2867856ce486d0559c5c0b1221707ceffc8726141466f7e7a22ca9580e6f5bea062de9d60b15864"], 0x32) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9902d002900010011d5080073008000e0ff06000e3103000900aa1631555be26bf093936e0910090400090001000f010420ff030600ef488d3003906c36b2867856ce486d0559c5c0b1221707ceffc8726141466f7e7a22ca9580e6f5bea062de9d60b15864"], 0x32) (async) [ 507.534758][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 507.565999][ T3662] Bluetooth: hci4: Received unexpected HCI Event 0x00 03:58:19 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x20280) sendto$inet6(r0, &(0x7f0000000040)="a08a411b0d7871531c02a39808ba56b13d2342779fc4f480c0c54fb1300cdd4dc80536cdd77054a7e1dbf1a09f843fbdda97de0f2516eb73b88dd3c64be6ec78e7e42362b42bd8afba72b377831b9c32c0b8397309", 0x55, 0x800, &(0x7f00000000c0)={0xa, 0x4e21, 0x9c, @mcast2, 0xffffffff}, 0x1c) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000aaaaaaaaaa0000"], 0x1d) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000400)="fb", 0x1) sendto$inet6(r1, &(0x7f0000000240)="88dba1856506f531caf7e809866d1e066e8930d4babf30d0a1a5e665a543fa0e09de08dcbd9ed2c2d8dfa950fbb5495c6fed181702474bb150d3ff52376a11eca5660b2090cc3023f7f5d34dea5206259198f8fe1fe78239582449ebcc628089d23aa46f2d15", 0x66, 0x8000, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x500, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x8000, 0x100) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0xaa3decf61fcfc2e2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000380)={0x400, 0x4}) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xbf}, @l2cap_cid_signaling={{0xbb}, [@l2cap_create_chan_req={{0xc, 0x3, 0x5}, {0x7, 0x9, 0x9}}, @l2cap_info_rsp={{0xb, 0x0, 0x3d}, {0x7, 0x2, "a9d3a1b9689e46c0321022bafce3a6045d925a571c6fadf6c258c554a2fb22312a3db4a8ff3b415e5e7e61e18b1484c36f31b464b94b15f54c"}}, @l2cap_info_rsp={{0xb, 0x3f, 0x34}, {0x8, 0x9, "26e89443b41eb71c812674a8bfbc2c83e578225967dc07ec81bf9a2a4c4d3a6022c823b9588b1c00f0b8a71220ce3bea"}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x5, 0x2007}}, @l2cap_conf_req={{0x4, 0x2, 0x21}, {0x4, 0x2, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x2, 0x8, 0x3, 0x0, 0x80000000}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_ews={0x7, 0x2, 0x8001}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x1}}, @l2cap_info_req={{0xa, 0x9, 0x2}, {0x8}}]}}, 0xc4) 03:58:19 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) 03:58:19 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x22) 03:58:19 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) (async) 03:58:19 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0c3f15190000009b25b320352e0299cddc7f6200"/32], 0x20) [ 507.701812][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 507.726072][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 507.734082][ T3647] Bluetooth: hci4: Received unexpected HCI Event 0x00 03:58:19 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x22) 03:58:19 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) (async) [ 507.852253][ T3662] Bluetooth: hci4: Received unexpected HCI Event 0x00 03:58:19 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0c3f15190000009b25b320352e0299cddc7f6200"/32], 0x20) 03:58:19 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f"], 0x22) 03:58:19 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x1, 0x4) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="e9369584058c2cd5181f0ebf84c56535fd2f11f44863c7d581e46c7a8a695019390f6f8da473d9aab6a68cff8732e67b1abf932b74b62764290ed2837a4608e4abc38c277070ca7bceca11f9d5acf58de5a44dedca5baec3fc04d05f47f6f0a94ed66df1af49e441fc8a1e06a48bb9631068ec90fc722a1280702e999ba3d1bc0391cdee4b90678d79a9f1ee62e9a99ac9", @ANYRES8=r1], 0x10) 03:58:19 executing program 0: r0 = gettid() rt_tgsigqueueinfo(r0, 0x0, 0x13, &(0x7f0000000140)={0x3c, 0x10000, 0x6}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:58:19 executing program 4: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0c3f15190000009b25b320352e0299cddc7f6200"/32], 0x20) 03:58:19 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x20280) sendto$inet6(r0, &(0x7f0000000040)="a08a411b0d7871531c02a39808ba56b13d2342779fc4f480c0c54fb1300cdd4dc80536cdd77054a7e1dbf1a09f843fbdda97de0f2516eb73b88dd3c64be6ec78e7e42362b42bd8afba72b377831b9c32c0b8397309", 0x55, 0x800, &(0x7f00000000c0)={0xa, 0x4e21, 0x9c, @mcast2, 0xffffffff}, 0x1c) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000aaaaaaaaaa0000"], 0x1d) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000400)="fb", 0x1) sendto$inet6(r1, &(0x7f0000000240)="88dba1856506f531caf7e809866d1e066e8930d4babf30d0a1a5e665a543fa0e09de08dcbd9ed2c2d8dfa950fbb5495c6fed181702474bb150d3ff52376a11eca5660b2090cc3023f7f5d34dea5206259198f8fe1fe78239582449ebcc628089d23aa46f2d15", 0x66, 0x8000, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x500, 0x0) (async) openat(r3, &(0x7f0000000300)='./file0\x00', 0x8000, 0x100) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0xaa3decf61fcfc2e2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000380)={0x400, 0x4}) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xbf}, @l2cap_cid_signaling={{0xbb}, [@l2cap_create_chan_req={{0xc, 0x3, 0x5}, {0x7, 0x9, 0x9}}, @l2cap_info_rsp={{0xb, 0x0, 0x3d}, {0x7, 0x2, "a9d3a1b9689e46c0321022bafce3a6045d925a571c6fadf6c258c554a2fb22312a3db4a8ff3b415e5e7e61e18b1484c36f31b464b94b15f54c"}}, @l2cap_info_rsp={{0xb, 0x3f, 0x34}, {0x8, 0x9, "26e89443b41eb71c812674a8bfbc2c83e578225967dc07ec81bf9a2a4c4d3a6022c823b9588b1c00f0b8a71220ce3bea"}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x5, 0x2007}}, @l2cap_conf_req={{0x4, 0x2, 0x21}, {0x4, 0x2, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x2, 0x8, 0x3, 0x0, 0x80000000}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_ews={0x7, 0x2, 0x8001}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x1}}, @l2cap_info_req={{0xa, 0x9, 0x2}, {0x8}}]}}, 0xc4) 03:58:19 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f"], 0x22) 03:58:19 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 03:58:19 executing program 0: r0 = gettid() rt_tgsigqueueinfo(r0, 0x0, 0x13, &(0x7f0000000140)={0x3c, 0x10000, 0x6}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) gettid() (async) rt_tgsigqueueinfo(r0, 0x0, 0x13, &(0x7f0000000140)={0x3c, 0x10000, 0x6}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) 03:58:19 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f"], 0x22) 03:58:19 executing program 0: r0 = gettid() rt_tgsigqueueinfo(r0, 0x0, 0x13, &(0x7f0000000140)={0x3c, 0x10000, 0x6}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) 03:58:19 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "774cfc0bd351ac286aab55d45fe3b19c64c6d9ee7b754cc45400c8ce893a15de33236a360f71eba2279bbe219af880e62b8ac2448c4d450d97a70fd79a9c9581aaaabbaa418ebbab1e94238146a2b713ed7d30fd255af6ae9782dc019038137aadcc1839809340b2f04f1e5caec9b9c73696880f866a5fe01f8ae8577247a9c4b7a171784ba7b492bb2e3c7d5792a548f41389ae780ea0e9c8238fd43b3c5c87cfcb9f763255d5bef1bde0fbd22e163e51359bc31e343417b931a41815310a6f764c5035a5e482dec54c50124f9aac7a6eac6ab8f1f9b5361908875da85284a45c9c573eed5f05ad7e5dd621210bb89d0718837d4f6462f4d8e5969544642bcb219d0c8e0e2951363d3616899b1aae9db5679901da71280f081abe9557cd9750e5ee501c02448f8fd041cb6906648faba2883a346ad66c8085ca2e8370065b5acbce3be554b7eaa8fc95896875435ad07290582a786138b597702f83436107aeff04306ce3164b4b87b6260972db07a391793e20263b7ce752631147d9933ef7e0fd72378ae868020d96aa039e4673a1d8b83e62d4bcb64d1ad9377b663803cbdf231cd2eadfd4296de4dd2656122e07ee99c02e8974fac60acc2eba122a97227f49763a81c99a644862067fdda35dd20d62983159b9d031173856de0e4579338bf45514289c0fe68b75eaf24d3be6f311a931dc6f779e9f6f175d4a6afd45d694e8e572c5dd956685441b491cbdbafa148fa36553cfdb744e450415510d7befe325e61323a406a9f5fed95ef7366af7023d5231e253400c3df3fff2288607bc4e64f0cbf5cc5a3da6661666232df74ed3489673fdcf212f3233bed3a7d9fbd11c6f9c2b7b258aa360ed448f66f4fd6b74d8f2abe22fdb9f4c4f85b04387b93bc6fcaf4d9111dda4821084ac3f5a796a82a341ff85d0f600a91c6e459f34c71e4c936280f19067d5e13e5a7d1e1e4cf1480f20422ce08d6cac49e66e5f698cdbd407d340c1ca27ea152929dd84ccf2cdb80858fda4e1a9baef31b979c6876815747fdae4d80d4b8c5f54b6ad70b48e6d4615a2cd22c886d70a1b49252faac2b6bfb11f64314535905d50133079803b960c2fab04a6faf54e972a5d317a262c314664c44849d6aea0c09e5753b0fe88e99c4dddd80cd8db20b17d5b81b17cdbc794597c4091e800bf6a141521fee0240ed4d2e1403057c132223cfb5aca4ff919ebdfd6a49d4f065f6548bc59ed5576b139b670769ca43493be1e829c5cfd45e259c5f4f4f072bface017b88b14d3325cc400301923fe92626fb094f4b39bb44538bd8896b66f78f2963285e388f9053aafa4bddbe12945ff4611c19ddf25cc4bf5797c0458782c1522d2535849670d1e541227f97c3eb1794d27700270c3c4d3ca2b3fe3e50de3b750993457bf3a2840cdb2e1afa08f5a666597cf1de6747f6d9063e88dacf7f2f3bce7419f375db2b14f7fdfa9d82b0b405d8c0a265b10a2bbe0826a2dce415f3eb09eaa3bd5d8f93a94df961d021a07c5d9167c6699293113def16106751cbf67959b6fa9bd9770ec71c635ecb7308870d6c75f7f1e43b7b8f7ba45a71dc6bd46773e86171785490da88e442a7378c354a4695e0e67694559d61fc9941aa34d2a91977d7ad3c7f54720acf7d747307efd9fe00ae0121b9081c0b4cc26e57e3b38c88516b721aaea878dcf318565d89eab2655052cbc84ca22a94bcf39006ccda6ed8ba02792dc914124e7255f3433177864a78396e003a2d31a045fb90b59e2338ad2d3b05cea2d46760c2bc4b3db0e8dd4bfdfd38c865974d43032d34008653ca4bf15ee3c3265c87db1a5156d3a639e3da355a009c43986b822c0a1730016206986698ff24ddd5bc3397f0f0e77fb4e6f691771c23ded6dba6ec36f2b4ea6671a90c4ed1a2796782981bf84cefbf3c982dec09f537f4d2f9e912a6731edc0e5c0eaf8d8005ad9c3e8a2beeca213145570d56f013e44b690726dd78e00211983f2fcbd0e0cef53e2a7b4f8d66df6c3fea7ed192ef7ae8f89a09ded89c048efe911b40108c1372a6454a2f5fd7ea7b05d75c3dfe0071bc3d6676373cfd46b3703f4e3aef382333504d81ac16cde34ff8bc46f27fd24d7bfeb0719dc15d1f3dff8901d33976a125f67d44b1e83b79dbc52e31ec6864c112f6604fea3e1332bcea5c059a268cd91c10819920b14fc8507ab4d655df414087e5a41f9b6fe8d9a4f867191fb9f0716e28e99e01c3cdf24796447d989da52b621a887031c651df22f4ce8a4c1d7abeb7dba209c1e63fe85b40cfeeaadaa619a9527db110e6b7bc1efb0b1c47ef8fc05319daf7e3a03923d2d1d71cb1053e8a316b94653d08c2e0151c5f41b1044d9377f4b6f098bd9a908e7f39a6f6257383e0331d409ba6df22d5e589a1696d6c6679b004fd589a5b948b9c6b17134204b79f0211e994913c33bed289cfcdbf76550286c64ac8ee74798bfdc6d52f1165cc78c0b23a1afdc102b5e912342eafbc41a1ee098fef0244650f07fd89bfd46b3fa94201ca1710402f2d684d7fad6e8313699bd35368408bad2d6f4fac6855fec98b36a54e8cc0b80ca2bf436ee8defd1a54aa3426658ea31a413b42df428dba2aaeafd92f9992796c25803361b8ae6c580fd97b5b2c7cf412b80030bc7784e5e046052eb526f5e6b64c259cc13d8e9dcc66212d981277ca6df5f2d53066488bd368ceabf6f1fad03a95d96a4db5b02a1c6fedaf3c662df04294fc12f0b8cd381c6a439ba3278b6284f6f01835e5c7d7fceb62cb3938d8869e6f6e0375bb5e956149739927a3cbb92792e79b0a949347b253dd8c4dd85eb26d7915efd0bfd193c1ce19ad93c3a8e09611bb2d92b61fe05afaa34bf1c781dd3d32a057e3c70e1a954a3be7d8587b06d36390233daa3bf7dde5fe8c3119ef0abb3504c48b7dadd03f50c0020a8055974f1d5cbd8a8ba0792229c8b851555aa3f8055f0645eebb1c6909151bc1e7c2ade119ca4d1618b92ee0211bf48b07c51c552143b22fda2d6f7f4e601965894fbfa0fd0415cae2f45e01f0d79e5f6676ce4730f10bf2907ecf25b20a40c8f7fb416f665d1be4fa66c9e9fc425cadbacffd27d0ea5702db5aeb9c26e86dd0f2c7fd233763765f1e337beff81c5d5d896773cdc5c6deb3108bd1714f6923ec2ff08495897a8a4b654b2ef87b146b7cc7dcff8c0979f45c0fc31d791df842c956ab3ed779d85790d50d751bc6750a36416e396f054b6213b82993c09e17e3d7a8a6b4a312cc51c141237494454f394062a40f926fceb7367fbef396dff7d820d24612b99dbec4824af402e2b6171acaf904df133ce431dc9bf16cf1f2dc02d34f265d69e1179334e59b0cbe4712950ac43c27bcf91753fcfa73f8d83232e60bab47f439cd7eb35f8e5d30d91b11c371a604ecdd104ca07e20d1cdd93896162b101e836106745fe4c18d9923dfe630b647ab15829aa92c5e62b4917899d571e640343c12a8044c0fb137b2eb65a2338a5de6dab533782ffdd3f413c1e526c17443701dbff362881c41be5847a27d013653ea5e8a986eaaf093e11e97b7171b6d77a817955573b7ba0c39df7d66bd24a8e746edd3c38cc9106e0d29df6f622821c1b3e3305f2d7147eb90168f3369511ca02f35241116420d2fe684be07ee66dd0c1bdba27a0ad94bd9c76157646c45b07f84b39bdf7d9f8463deb5d0fc63bade73d99ae0de6a76f7ec7c5c67953eddca651c53900a48fb5a43003046fa3eeaed75db0f8b5d2c44fe38e241dec6be63fffaa603294e820a310d5e9c91991d2c53d73d440a39cdc73c2ea9f3e791f0f77b75b41688c01cba3e9fedf6a238fba81878f58c3f5cd7bf451791a4b2949e5089bb5c896d666a24262d10b7015b8f07bcca0d97c7b9494302f2220604a9737637fb11b74ea0ff55188b00e40a51f3360931a559b4d7a443a5576ddb1ada13c4d63d64cfe87fac768314e7d60665c48e1770e47a254749ebe743d9fd21fbbccfa1893581a8f73de091d3cd1165e85755711d34c4ce9e9b61a7485eef0fd2735b3eba0b97d51c7e56e91ef7407f4fa7259c5bbe5c2d64271e7491d8ea8c55f6aa0c3cbd48a02c307e3f11804cea8f8906766119cf666c5c0a4c8db7a48596237f4d91857d6f5a0452c4ad2c7921d6aedf36461d6f90d813144525104152a8b3e81558a65080ee7baa632d8b9be6c394d43691d32df7905341afd99c9c4db4ddf67c44a0a28546a0d4a9b90069d6f57aaa0bd1af9646dc29c9b2736df9c2131f00adc1a6eab81469c763e4b00b4eaabfae86467e72bdc300d426a61434b3f082a98da44737e45e0402b669e8d674e05c0a050a698777eccbbc37cac7d33ba8995eec0e4b99ad9d6737bfeb67abd248cd310311a6e5751b8f4a22502c04c3d2e99da95b6bbf6d2d498c059856e6a626edd0d2d6c190fd48d4286322ee64a73c74501ce339822fba3d478c81cbb859ee7e286bb02fed97cdad8869cf380f7043d0a5b6a5964dd08cae693a231275ac63fd008b696d37e77a23403c8c1e83ed9e1c5f5ecaf9a93f1e67a78813daf13db653925bfee3972eeb656396ef89f33125a16f4952e56328309bbd84b009e3967c9fbb6c57542bffa19baf0d9c0aef2095696a94b1d4c8d4d8d65ac7010fff92ef4f72d7eb15a12485eba5e60de8979d3f923b144a5d0732ca8d4f7404acb66dafa8ab1273307684cc1d491a480eab6b0340d5b55193c6ede210e1e95881c93ebaa05618e9961352e6d07a29e1e16c4555bef52c24c8f596647097d533343656b708f2df5ea520870170eee3636371c0b9ebb41e37a6aa00a9cf574d5af8f4da7bca9bc0f15d6ec96996249b667eedb406ae2fb1a131d8e4d5be4f5c26e0ade7d79951b2eb7a64dc7bee55a1890212482fcf3bba9701324455d11c5f23cc9dd384b3b8ab0d27271d663cec49510e674734605fdf093793c35f699485172c6482ba3c17c063125bcf844ad83b4c548f79c9fbed5cf1c4b375f404505c3a152cb5cf749fb0a22165a0f7fd2b7fe74252a846c764cb8e3b969f90204ed371a9df5b3213d8cce76854a7960c2d1910a0ea7b4b9614efb325b5cd3590b6f22ab1e590e5ad4cb764e7eaa317abc355574253ec4dcb5e17cfd45e27ccae445ee9fd200704f4454b9a9786c8a748974df967f836e95096971686998e8b143748cc49d8521cb3f0ce77bf2e96dc65f722052e349d63caa69a0c9b0afc30a1560ff30251367137b1416896b6e4641fd09f882ba470d17542ad1eaae7821607f3ee086fa849260092127c380e7b288e343f4d9873ca47d4d0abe49f56d15abdb96e05196845c55cdc1ffef6df6170e7c363bd16acb8536fe2cd66a0f2d87ded850b4db200f376ca8746ba29bc3da94430ec6abdf2bad22ec36aaa5b607418af754f5ad880190be92363bf156a81f4f3b72e5d64eaf4fc916d2bb25a9095334390dd22f437670af7027c33ef255758e49e42fd09d27b0a50420e8c2dccc3896272d46556d5333bb093392d70f8d41362944237718a6fa930189fa891da5145e6cc9beabfd597df847309d79d0b659bc42e8f5777b4eb92f26942524ead00b7be4f4fa3de5cff4dc9e390302ffde1dcaadb47e15f57b6e57663d61a5e3d2b550bf503c3ce825b89c444a1524f31f90304eb57517a206224ea1ec9b91638a84a8fdb9f283262ff94e3a5d2095368c0777f491fdce2cd6ef3e51e7d51c7eba51fb033ea445b0e8451b512de47cb7d7eb6d39f0e0d6ffa20b2a2751e57fc7e120ec59354b8f891877e9ac"}, 0x1004) [ 508.497205][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 03:58:20 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:58:20 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a"], 0x22) [ 508.625330][ T3647] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 508.750154][ T4120] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 508.758950][ T4120] Bluetooth: hci1: Injecting HCI hardware error event [ 508.767324][ T3647] Bluetooth: hci1: hardware error 0x00 [ 508.785372][ T3647] ================================================================== [ 508.793457][ T3647] BUG: KASAN: use-after-free in __list_del_entry_valid+0xf2/0x110 [ 508.801342][ T3647] Read of size 8 at addr ffff88807c0d78c8 by task kworker/u5:2/3647 [ 508.809327][ T3647] [ 508.811657][ T3647] CPU: 1 PID: 3647 Comm: kworker/u5:2 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 508.821815][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 508.831878][ T3647] Workqueue: hci1 hci_error_reset [ 508.836923][ T3647] Call Trace: [ 508.840200][ T3647] [ 508.843152][ T3647] dump_stack_lvl+0xcd/0x134 [ 508.847743][ T3647] print_report.cold+0x2ba/0x719 [ 508.852703][ T3647] ? __list_del_entry_valid+0xf2/0x110 [ 508.858160][ T3647] kasan_report+0xb1/0x1e0 [ 508.862588][ T3647] ? __list_del_entry_valid+0xf2/0x110 [ 508.868044][ T3647] __list_del_entry_valid+0xf2/0x110 [ 508.873327][ T3647] klist_release+0x66/0x480 [ 508.877874][ T3647] ? class_create_release+0x70/0x70 [ 508.883070][ T3647] klist_put+0x151/0x1d0 [ 508.887306][ T3647] device_del+0x46d/0xc80 [ 508.891630][ T3647] ? __device_link_del+0x380/0x380 [ 508.896731][ T3647] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 508.902531][ T3647] hci_conn_del_sysfs+0xdc/0x180 [ 508.907460][ T3647] hci_conn_cleanup+0x315/0x7b0 [ 508.912306][ T3647] hci_conn_del+0x29b/0x790 [ 508.916800][ T3647] hci_conn_hash_flush+0x197/0x260 [ 508.921905][ T3647] hci_dev_close_sync+0x55d/0x1130 [ 508.927080][ T3647] ? hci_dev_open_sync+0x2190/0x2190 [ 508.932360][ T3647] ? lock_downgrade+0x6e0/0x6e0 [ 508.937202][ T3647] ? do_raw_spin_lock+0x120/0x2a0 [ 508.942227][ T3647] hci_dev_do_close+0x2d/0x70 [ 508.946899][ T3647] hci_error_reset+0x96/0x130 [ 508.951573][ T3647] process_one_work+0x991/0x1610 [ 508.956508][ T3647] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 508.961878][ T3647] ? rwlock_bug.part.0+0x90/0x90 [ 508.966807][ T3647] ? _raw_spin_lock_irq+0x41/0x50 [ 508.971839][ T3647] worker_thread+0x665/0x1080 [ 508.976512][ T3647] ? process_one_work+0x1610/0x1610 [ 508.981706][ T3647] kthread+0x2e4/0x3a0 [ 508.985765][ T3647] ? kthread_complete_and_exit+0x40/0x40 [ 508.991390][ T3647] ret_from_fork+0x1f/0x30 [ 508.995809][ T3647] [ 508.998818][ T3647] [ 509.001129][ T3647] Allocated by task 3658: [ 509.005438][ T3647] kasan_save_stack+0x1e/0x40 [ 509.010110][ T3647] __kasan_kmalloc+0xa9/0xd0 [ 509.014692][ T3647] device_add+0x1168/0x1e90 [ 509.019185][ T3647] hci_conn_add_sysfs+0x9b/0x1b0 [ 509.024111][ T3647] le_conn_complete_evt+0xf04/0x1560 [ 509.029392][ T3647] hci_le_conn_complete_evt+0x238/0x340 [ 509.034928][ T3647] hci_le_meta_evt+0x2b8/0x510 [ 509.039698][ T3647] hci_event_packet+0x63d/0xfd0 [ 509.044538][ T3647] hci_rx_work+0xae7/0x1230 [ 509.049033][ T3647] process_one_work+0x991/0x1610 [ 509.053974][ T3647] worker_thread+0x665/0x1080 [ 509.058640][ T3647] kthread+0x2e4/0x3a0 [ 509.062698][ T3647] ret_from_fork+0x1f/0x30 [ 509.067107][ T3647] [ 509.069416][ T3647] The buggy address belongs to the object at ffff88807c0d7800 [ 509.069416][ T3647] which belongs to the cache kmalloc-512 of size 512 [ 509.083452][ T3647] The buggy address is located 200 bytes inside of [ 509.083452][ T3647] 512-byte region [ffff88807c0d7800, ffff88807c0d7a00) [ 509.096712][ T3647] [ 509.099022][ T3647] The buggy address belongs to the physical page: [ 509.105429][ T3647] page:ffffea0001f03500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807c0d7800 pfn:0x7c0d4 [ 509.116869][ T3647] head:ffffea0001f03500 order:2 compound_mapcount:0 compound_pincount:0 [ 509.125177][ T3647] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 509.133151][ T3647] raw: 00fff00000010200 ffffea000087de08 ffffea0001f77f08 ffff888011841c80 [ 509.141724][ T3647] raw: ffff88807c0d7800 0000000000100004 00000001ffffffff 0000000000000000 [ 509.150289][ T3647] page dumped because: kasan: bad access detected [ 509.156684][ T3647] page_owner tracks the page as allocated [ 509.162379][ T3647] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16, tgid 16 (ksoftirqd/0), ts 73041325755, free_ts 72780087272 [ 509.182686][ T3647] get_page_from_freelist+0x109b/0x2ce0 [ 509.188227][ T3647] __alloc_pages+0x1c7/0x510 [ 509.192822][ T3647] alloc_pages+0x1a6/0x270 [ 509.197230][ T3647] allocate_slab+0x27e/0x3d0 [ 509.201812][ T3647] ___slab_alloc+0x7f1/0xe10 [ 509.206393][ T3647] __slab_alloc.constprop.0+0x4d/0xa0 [ 509.211755][ T3647] __kmalloc_node_track_caller+0x2f1/0x390 [ 509.217555][ T3647] __alloc_skb+0xd9/0x2f0 [ 509.221875][ T3647] __napi_alloc_skb+0x93/0x340 [ 509.226627][ T3647] page_to_skb+0x17d/0xc10 [ 509.231101][ T3647] receive_buf+0xe0a/0x5560 [ 509.235606][ T3647] virtnet_poll+0x708/0x1310 [ 509.240189][ T3647] __napi_poll+0xb3/0x6d0 [ 509.244521][ T3647] net_rx_action+0x9c1/0xd90 [ 509.249098][ T3647] __do_softirq+0x1d3/0x9c6 [ 509.253592][ T3647] page last free stack trace: [ 509.258248][ T3647] free_pcp_prepare+0x5e4/0xd20 [ 509.263093][ T3647] free_unref_page+0x19/0x4d0 [ 509.267760][ T3647] __unfreeze_partials+0x17c/0x1a0 [ 509.272863][ T3647] qlist_free_all+0x6a/0x170 [ 509.277445][ T3647] kasan_quarantine_reduce+0x180/0x200 [ 509.282896][ T3647] __kasan_slab_alloc+0xa2/0xc0 [ 509.287737][ T3647] kmem_cache_alloc_node+0x2b1/0x3f0 [ 509.293012][ T3647] __alloc_skb+0x210/0x2f0 [ 509.297425][ T3647] tcp_stream_alloc_skb+0x38/0x580 [ 509.302541][ T3647] tcp_sendmsg_locked+0xc36/0x2f80 [ 509.307644][ T3647] tcp_sendmsg+0x2b/0x40 [ 509.311875][ T3647] inet_sendmsg+0x99/0xe0 [ 509.316203][ T3647] sock_sendmsg+0xcf/0x120 [ 509.320611][ T3647] sock_write_iter+0x291/0x3d0 [ 509.325364][ T3647] vfs_write+0x9e9/0xdd0 [ 509.329607][ T3647] ksys_write+0x1e8/0x250 [ 509.333928][ T3647] [ 509.336246][ T3647] Memory state around the buggy address: [ 509.341859][ T3647] ffff88807c0d7780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 509.349911][ T3647] ffff88807c0d7800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 509.357957][ T3647] >ffff88807c0d7880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 509.366001][ T3647] ^ [ 509.372408][ T3647] ffff88807c0d7900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 509.380459][ T3647] ffff88807c0d7980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 509.388592][ T3647] ================================================================== 03:58:20 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x1, 0x4) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="e9369584058c2cd5181f0ebf84c56535fd2f11f44863c7d581e46c7a8a695019390f6f8da473d9aab6a68cff8732e67b1abf932b74b62764290ed2837a4608e4abc38c277070ca7bceca11f9d5acf58de5a44dedca5baec3fc04d05f47f6f0a94ed66df1af49e441fc8a1e06a48bb9631068ec90fc722a1280702e999ba3d1bc0391cdee4b90678d79a9f1ee62e9a99ac9", @ANYRES8=r1], 0x10) 03:58:20 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0x0, "9b25b3", ' 5.', "0299cd", "dc7f62"}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 03:58:20 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xca}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed, 0xb0, "aef1e3fc072e54623d0c293dedde67796b5709d72d7c2c120f8158cfbca9a3bb07bbd67de6c0786bebff7490f3757c85b477867b73ee93637fae30ac581a607e5a781f2fa9bf8ae922462a7804de49191a81a4b7c49553f87cffffcc630765d2b31d89306481993f5658e32d22ce36ebb6b3a3b817eb4692c72ea54f24d33ac83abf3905014212ef13d54c24db376e0c5149ffff140272335a59c3ef832bc97571463d6901325cf13cd64fd6ec846d96"}]}}}}, 0xcd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 509.397214][ T3647] Kernel panic - not syncing: panic_on_warn set ... [ 509.403804][ T3647] CPU: 1 PID: 3647 Comm: kworker/u5:2 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 509.413957][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 509.424026][ T3647] Workqueue: hci1 hci_error_reset [ 509.429080][ T3647] Call Trace: [ 509.432359][ T3647] [ 509.435296][ T3647] dump_stack_lvl+0xcd/0x134 [ 509.439909][ T3647] panic+0x2c8/0x627 [ 509.443849][ T3647] ? panic_print_sys_info.part.0+0x10b/0x10b 03:58:20 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x20280) sendto$inet6(r0, &(0x7f0000000040)="a08a411b0d7871531c02a39808ba56b13d2342779fc4f480c0c54fb1300cdd4dc80536cdd77054a7e1dbf1a09f843fbdda97de0f2516eb73b88dd3c64be6ec78e7e42362b42bd8afba72b377831b9c32c0b8397309", 0x55, 0x800, &(0x7f00000000c0)={0xa, 0x4e21, 0x9c, @mcast2, 0xffffffff}, 0x1c) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1a0d01020000ffffffffffff0000000000aaaaaaaaaa0000"], 0x1d) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000400)="fb", 0x1) (async) sendto$inet6(r1, &(0x7f0000000240)="88dba1856506f531caf7e809866d1e066e8930d4babf30d0a1a5e665a543fa0e09de08dcbd9ed2c2d8dfa950fbb5495c6fed181702474bb150d3ff52376a11eca5660b2090cc3023f7f5d34dea5206259198f8fe1fe78239582449ebcc628089d23aa46f2d15", 0x66, 0x8000, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x500, 0x0) (async) openat(r3, &(0x7f0000000300)='./file0\x00', 0x8000, 0x100) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0xaa3decf61fcfc2e2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000380)={0x400, 0x4}) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xbf}, @l2cap_cid_signaling={{0xbb}, [@l2cap_create_chan_req={{0xc, 0x3, 0x5}, {0x7, 0x9, 0x9}}, @l2cap_info_rsp={{0xb, 0x0, 0x3d}, {0x7, 0x2, "a9d3a1b9689e46c0321022bafce3a6045d925a571c6fadf6c258c554a2fb22312a3db4a8ff3b415e5e7e61e18b1484c36f31b464b94b15f54c"}}, @l2cap_info_rsp={{0xb, 0x3f, 0x34}, {0x8, 0x9, "26e89443b41eb71c812674a8bfbc2c83e578225967dc07ec81bf9a2a4c4d3a6022c823b9588b1c00f0b8a71220ce3bea"}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x5, 0x2007}}, @l2cap_conf_req={{0x4, 0x2, 0x21}, {0x4, 0x2, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x2, 0x8, 0x3, 0x0, 0x80000000}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_ews={0x7, 0x2, 0x8001}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x1}}, @l2cap_info_req={{0xa, 0x9, 0x2}, {0x8}}]}}, 0xc4) 03:58:20 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a"], 0x22) [ 509.449848][ T3647] ? __list_del_entry_valid+0xf2/0x110 [ 509.455321][ T3647] end_report.part.0+0x3f/0x7c [ 509.457379][ T3662] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 509.467709][ T3647] kasan_report.cold+0xa/0xf [ 509.472312][ T3647] ? __list_del_entry_valid+0xf2/0x110 [ 509.477809][ T3647] __list_del_entry_valid+0xf2/0x110 [ 509.483103][ T3647] klist_release+0x66/0x480 [ 509.487623][ T3647] ? class_create_release+0x70/0x70 [ 509.492833][ T3647] klist_put+0x151/0x1d0 [ 509.494563][ T3662] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 509.505740][ T3647] device_del+0x46d/0xc80 [ 509.510085][ T3647] ? __device_link_del+0x380/0x380 [ 509.515208][ T3647] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 509.521030][ T3647] hci_conn_del_sysfs+0xdc/0x180 [ 509.525991][ T3647] hci_conn_cleanup+0x315/0x7b0 [ 509.530855][ T3647] hci_conn_del+0x29b/0x790 [ 509.535368][ T3647] hci_conn_hash_flush+0x197/0x260 [ 509.540500][ T3647] hci_dev_close_sync+0x55d/0x1130 [ 509.545627][ T3647] ? hci_dev_open_sync+0x2190/0x2190 [ 509.550926][ T3647] ? lock_downgrade+0x6e0/0x6e0 [ 509.555794][ T3647] ? do_raw_spin_lock+0x120/0x2a0 [ 509.560829][ T3647] hci_dev_do_close+0x2d/0x70 [ 509.565519][ T3647] hci_error_reset+0x96/0x130 [ 509.570207][ T3647] process_one_work+0x991/0x1610 [ 509.575162][ T3647] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 509.580549][ T3647] ? rwlock_bug.part.0+0x90/0x90 [ 509.585492][ T3647] ? _raw_spin_lock_irq+0x41/0x50 [ 509.590528][ T3647] worker_thread+0x665/0x1080 [ 509.595225][ T3647] ? process_one_work+0x1610/0x1610 [ 509.600437][ T3647] kthread+0x2e4/0x3a0 [ 509.604530][ T3647] ? kthread_complete_and_exit+0x40/0x40 [ 509.610192][ T3647] ret_from_fork+0x1f/0x30 [ 509.614630][ T3647] [ 509.617811][ T3647] Kernel Offset: disabled [ 509.622128][ T3647] Rebooting in 86400 seconds..