7f12a79c83a5de2253e210c7a532867c5183a0abcc23e1f7da22e35a598cb4be1c7567a25d5166506fc4b9c8cffe278be1178026f2834b3aba73211dc86dc02829e0e6ea481fb8422baaaaae2f8b5a398110c3ad141c734e2ea72856f79732176a1b896682a4eb69b143cd0b1a919855fbceb31623573844e4181a4e9da7b39acb373b3699f934f5433a83b606ba12537c42476bf36b43c4a202da7a09e857708e70649aba0f18836857012012c20f2346571c0aff803a35cb418038a81cd6cb69bb9bb7abc9c60bb46c9abd3d28c9ce4fce6a1e231ee8016d81413a6b99a5d78c0ffa82a23382d22e5381d025356ea8fba248ee616fd0e9718427a09463d7f647d722137ef1cda9548bdda1961d0f011e10f9342fad5f1bb44e8d81449eea309efa226a809bb24df6a6ad1fb18e3be6bbc964a9d0e38e2bc4f20b85770a437f2e53b57ad0d9f68280958737523846df2e3bd8b9ac134bce58b6f3b92836e391bd7d3da39613aef34442c5bf74fd3f425aeece33deeed88aa811cebf239ba0abfa1ae6b4d53394f5ef0743c41367ce662ea619003d64cffc0c218d453c7d3830f898925215618d2c8623cf3cdcf7a5edbbdacb99b1193431e640dd6e5ed1435553bffd3dc6dae07e3920b4c1af7ed6b4d67da83d8f77f14ad5a3caa32c12a423304558397e5051350e2a086703716ee24da3afcc5293cbee6c4726cd8f6bec2ad154c4fb454a85e8ef423ccaaf97d236fb634c8fd6645e862c189fe65a459ef85f570289e5ca4a83632438c2b42fd2456266d7ef5c31b054c0138cef9dd16b4ff74f0920f17ec0f31520350327ce770209c8222e52095bcaaf889ac354068bb5f1d5c85c5f8a459fa0797e98ebbea345256e1909c7781b891637ad2f3c39ab5bb7b2812b95454f484f61ea9ead5b2791c38a31d938107e5f7910250c21d39ff8571580612fe5a6eba6a6dfacc086b6c951cc45a66e98afbbd3be7ac6c41f1f0ff945415e4e9c72e575b34bf80ff7273f2"}) 20:25:43 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) dup(r0) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) dup(r0) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:44 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) dup(r0) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:44 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) dup(r0) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) dup(r0) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x408, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:45 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0xc00, 0x0, 0x0) 20:25:45 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:45 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x402, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x402, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) dup(r0) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:46 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:47 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0xb, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r9}}, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x400000, 0x85, 0x4}, &(0x7f00000000c0)='./bus\x00', 0x18, 0x0, 0x12345, {0x0, r9}}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x89a0, &(0x7f0000002800)={0x8, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000001200)={r10, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {0x0, r12}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {r10}], 0x81, "7464fbe08eb369"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "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", "8ca341bdc1e073db62f9c1089429276d1bc9df6b0890b1d1e1fcebe553e55fca30ce7739f6f68d6f686b060ac05c38537f46f3495e16f7827372c56ad23d893ec8e3ac528a4f43b06c4b695fc19461c7f1e36ec633faee9048745891cdf6b6c7d7afdfe12238f93df46eb7fefdbdd8fe686290869dca63d99bc7eedb9341c0f472508e50feec0215c214408677e9f1813c3310bb36e3d023e93cf6f00efe5c5d0328dd8456634150f5ecae4923c1ac678bb1d30f2ff07aa1ed99ea431c02ea125a596a64013eb1f68277b9d1e90594743deab201190f41c1965ec88d68ceb99d5b5d8db9af30749c95499dfba8b568c8030cb6a0d82fdedbdeddb9d95c1887d9423cb8b6642fa33777beb03dcac715efe83b3ce75fb7e372d8f3c13a4799bce828e17d441199767816d2219bcc914ba7885e17897486d399b9a3ef9b5eb79a2de45130b9b16cbba3ccab147c7b518ff37a12a68810aaba18fbd7910b014719450d6e95e956dceebc4f9612e13af4fafdadf355c5fdd0509585c572a12a943badc23d8275c65b0f2ad86a69ba0234984119fa127f1acfe19163f3fab373abd883909a762f3c3506397dbf02162d3267495b48268229a9861249f5dbb3eaa133842b6716d102d53ebb9108fc5750fdabd34f8ef2bf2982067209bf57abe3a850eecced597fc73d08c8322e94644e971f1224d719e4b1a83cd3efab94694353236884e858585dde917005fd838e660a67d6d6861ac9475af0235ea19b595630d594372124d3445784e16ec388dad5f1f5669870db5b938593ba772a95dcc94544c6f5ebfab9ed20811bafbb20afe3ff33b879c83423421b8be6f70588e7267d461b96bbcf676984851d11bce0253429b4350eedda9e7a08adcfb83b7b66c799bf2bcc242d4cbb8b3fb9018cd033fe62e8bbf4b686e08bbedd839c9dd43cf78c736124c54c9dce5d7f4eddcd52bb48d473c967ff61a92a2ac64eaed651d00de4fa3ef93a2948bb22e67a8000f3d870c3a09be7bcedb49c66afd98280e48f9911f21d24dedff0ab2b97c9864a45cf95d52a8d22dca990629860f104291fa363aaf4223b025c7048f2f832bf9df4b82befbbaf1958f88849d77f7f09f041a091501dc13041eb1b07f850739b1772845eeba4137eea233ee386191a3f3750f1a98f8e51c326298a8b0821290315263d91310e47d2ac8bd2e9cbfc60f868957cc76bd976f5317f9952e55303a5a74352af3b6c2e57d3a32f1f4df75d10d2f728bef111dd168c31ec37f081c4a2d9d747f71341478ae3ada1d38e24f95cf0282eea9990cd0d246f384d4661aa2eb01a508e877fed73ca4e5d4789757a266ed8540261198038fce9b78618e715e5c0b78bc407e2a7324e0027180bb76c40f3a21d6dac7062d86931b40fab908743ec3be6c432520b18375df9bf8dbcfbbc80feb87a6d58bb27980ce6c569d1deb0073f4dd6caf4506a61858519ce0542279a50de595e74e616302afb5e879311880548919d3d246c502300149d0e6a5932f2c3562dafd97001d869ea7beb4e4c49d49c9f89c8a2b329dd0bda33c7db10d4987e6990b59a92302b04e9b07a3c025d7cf7fb872e42affd0ffac6f34309b1a44001998385cfa4507ca6e886a32e662199adcc19b458aa4df2e7c571caabf9ef38b6a08d3cd93732849d9bc255a9d3b57d9f0c2e1e5209954248b253d82d59b0b79840cdd4a215a94332b8e2cca7873706940d7db797286d129a63c034e8a05160267f258332aecb5f9bbbb258c4b9f91026a080556864185f4abc72ed2f2c2518293373379477d165d42c563fdb99c80f3b468ded37bfba884236108bb87fb401d74c31d009ed8a94aa40a8004986431a72c1a1faf95ba204e5c6610d6116916d95e1a3905a494a2f13ac4035d8f1a477c1582b583cfc4dab68cc82dcdc53756877ff497debddb6854d53cd2cf99aaec950a9594b65b4eb29b44ec12ffa45f29f1c884ca4f073f0e82b01bf43b6a4c917c5608427984e8e73ba8a6ea0be6d9d728b565ca8051cd0777d72ce93f3ae0e157548d29b83ace3be578667beb5a23c4af967770794473a14db9b98a6dbd201f30a487c3903fae94c725105d92ab8592e2f53fe8f94aeb49ffed25441f98b7928a81e9267cabc9279016e4ad65121a9213f113a1022758988979703d4975ddd3f68b7baf22407411fc21bb5ccb90208a0633ea8a76e6fbca340c94ef8a19d406c8d9b5414773c3c8bbbc24c5f6d8979e538df6d125cd2c4d4b8f472f195a503cd545914f69c7380a828d339fd309471a2303bc68413649559912d3654bb8d5ab4b54eca3ece553e3b0b6622d36e2135fea7aa08cd327be5152412d65540834b3a30bac670114196f1fcc9102a9de8968c6df3105e989926f75e3675bdec07423911141ffe5c2ef9db52b03aaaa3c8478d7f06fd6d2eb4d8e8a70701a3c1121e34468095bab6915734dbcedea1588013028d8dcd4bdd54768f34f9f4333f4b5207fb48085639e2a09c65709cff3ae8c330c9355a6c9efc413015c3c3f4aa069f492d6d2f8c19b8b8d13aeb6f302d4714767f358c5c08ce4a74d8a4e85d53f1089daee1f53fd0dc82570700fe3798f2fe67ecb31e86c3439bd7466d1a1119669aa086b835d57675320e902ae1a11ebabd2d00c790a86d6dd854d57f121597f9a4ade9be29fd44cdecd890a2b9eed46f8e3101e71ed42b59eae87bb3676c59b13ca7bf49a40228d57fcadc851f376cd2f0e01cd44a20b95b71aa9d3dfee81b416057e5994b4d5be6448ec4e11351116170ba395a920adb12b4462f1fdd344452919837d852632219dd8c366837fbe8b3b13bbd9225862da77983369a1294452197d86211b466996cc7311aa399b3a1ddbddd5e58f10d7309591d0e330390ae49fe39789bd1de1982ba98b67c827896e75098b1a574c4d454cc936cd3924b022e3b1ebffb6f8f56f11abdc6dd7e1315ad2037f1ad708aed847b81295b42f7c2121ba7867e1ae94356bd9d4591446c33c387dab1c0c9574b00fdcaa694fe79fffcf926e4bab9b5afaf8d9a708b4bcc179f9a08eb9166986d00712da2df9a5a8c14dc1ccd55fb961067e4a6abc813d4f5d39774872d5b01d4eda938bf4e77b4dd6fa0443a30cae6943a049a7dd63a2f7c8ce49193ac1e5eb1f140d5bcfa35cedf6b162508039960601a4ebfad52f34c557a5138423fa684de072e029e0dbd787e34eee2f5830236c7c399764c46c4af7cdcae05cb72704dffc06425688f6185bae316cef17d564e3c6ce5abcd49dda758f5d67d3f7609ff93f26a62a0b81f438bb51b9619465f2b552b89a8614a74ebcb1530c8ac8c474de3cd814fb6ba11bd5e67b41c80f904a96c8e20e1f1c65a7de08542e4dde1ebb9e68486d2610885ef72d20cb548e14ce30f03d138b516c42cc01373795b7117c183fa23653f59e89fbe203d48e9e1d13674f057782ea016324d8a7cc8cfecdcbfd9ac3f2b14c6d92c3a90731d2dbc02d27607fc3a62a1f0966f9b9da00bcbd837546c8fd9198febd1292139cd4fbdaa622c9ec9d07776e9093e6d9d170d27d7c4b94b03ca7215be4cfd92211182e741cf595ed20a87be45294b6f150ab63fa4bc92386d36b34b2edff1dc34949f17bfcb33444f28077be173e62a9d4f2983883260f1b314cbab7d22f9e98d0d5692d92b19707ea1cad7b408f73df0d8283ecd8cd3cfaebf4274deba0c62ee93da60f2e1b9abfe9bf34f6db39a1c451274720777b2c5ab2f14f45708c7debfbb80aec0053ba11d3d4ee4811cd6c36bbd5abda52037dc963e0b4862c75afb323275ca016eb39eb8e943bd6cfe4cde572ef5596cbfbbef7281d37197d94568310247ead51f15974984bc58320cefc26a25ddf6144dd374d1a2ce611aef9269c1825bc58088e6e1060064655c0371c32a255fb65518629ecb6caf12d1751e1b8a6b6d09bde72c9ef1af9286e9b41f9506a93edee916bc03969159ff732299ebb34f3b812638f796d3ea0dee7aab6cd66dc840bd7671bd731a0b233c4ac0defd50a552c2e4e94daeb06166bef7d39c4a22d04dfd17b83248721dae8850333ce61fe55b2b7495506c46fb0507235b96bb68ba064aaef2a21dd1662a55d42896b1eb3790cbc044e398717979f29baffe9d5cfe3289ae53f7a503bdf66d280cd2f1598404bae9fb4cc084f88880332ddd8bc3debfbd18e53b34ed6ea4557bcb6600fad827fa03d84ddbd164472eee775e884d0ee433a3bca49c69aa8d4247a5dffc78b2062ad92351a4ad87b9928ddb0305e21cf3728703830a4746594d041a23ae0c130730ecca08ba16fa0cc6451e009ae45a5749c897936bc905756cb2244493b2346641b1601db93df9334995e2bd368cbf1a13b87aa48670ec7af9bfa3cda6a4bd85ea1fa20f874492820c46892e7c145dcc2a879e3450782376250af565be5ba5b88ecc71160552fadcf4b29ca251f0d62500e806cebda3fa4634e61538cb4f07d1c516e136f145d8e20cc8bb53340015ba19fe213596ac3c24f61595998babb2910bb4c7c47647ce95aa761f49c2ca82c3d246bccafb80c66c673a4090cb1f9e3fb19fd19039cfe1bd120816e7ab136f4b2f71b69ef80be6589e37b5551d44cdbda438de5dc2dab78f0e5e1e684abad36fac4b11ffe7e2b8cf1b59e8d7353858e7f4e03aa23bf48a03c64b50f87bdd026d73efa7ba7a3bea6ba39f8a87329d2b452d69de2eddf0865ea878a2e7aeb9902a7a8f84d5ee5c0b5a4e39274b7fb8e7859b9c9f5bab86d452d7fc3167f7cb0373db028241dbf3f4a4538165a4b9e881668a11b43c26ff0ba960d92a8a6c689a83a2a48974ad96acf94f174c8856a12c574c38df9da1a8b0e8c1df53eba6938fc44837d35550fd68152ccda7b8a3d953d89f024bcfe5f713fa1bcab2dfbc5cf9afa8c4e70f3793f657e6ddb20669a826ae3767962911f685cd90c3d1fcf88625e8eda441ee62a0fa37923b9ec7d2e2a33b0b73544e107184d8f44e3553b11c76566bf73084617fd025b71b3010c2cebe8d58a797d283e06b39034937739b14f716ffd91b6f8fa998df7e91b151f35304fc714c3d838bde83195a1bfe13d440815fe8ea0d7b97887ec8a64e589e6061c0bb049de0298275159de8293c2d2e9cac590c9f1fa9a2f1e02156f11fdf730bd2335fa50b3c57d6ffbae972820088133fca2f21a520052c75775c841dbe3ca0cedb3502c142b1a6caf68e31d5831416bc3f10c6dc650d8d23a9a865acf98f63187ae4eb475a9ae27f755cb5fb24cd01a67e5f3d379b48096e38051030713b6114877c1adbec623170ea0a828004f73fce26973e3554cc0b3dbab4a5fb9c4b0058ebfecfda32343b8207ff4e8ed2c8e89dbc392ca8ebfb4c957bee8ae8c1ff64ae820a32bca6cb"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000013c0)={r12, r13, "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", "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"}) 20:25:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r9}}, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x400000, 0x85, 0x4}, &(0x7f00000000c0)='./bus\x00', 0x18, 0x0, 0x12345, {0x0, r9}}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x89a0, &(0x7f0000002800)={0x8, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000001200)={r10, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {0x0, r12}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {r10}], 0x81, "7464fbe08eb369"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000013c0)={r12, r13, "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", "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"}) 20:25:47 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x40a, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:47 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450e, 0x30000000, 0x0, 0x0, 0x0) 20:25:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x1}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r7}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x400000, 0x85, 0x4}, &(0x7f00000000c0)='./bus\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x89a0, &(0x7f0000002800)={0x8, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000001200)={r8, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {r8}], 0x81, "7464fbe08eb369"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "a18685e3457db27b90a9f3cdbf4d9d89a8260347e51ca5e61bae189c47d104ea2c977ed4c3d41fe440bd44c6fecfa2cb26a157802488c2f1c9d0f58e4e30e673ec33ee920f5e421e80ff23685ad6c61f3d2468ecfd44fda5a45222d1f9ffef04a07d71d8c3db65fdf2a54d41f01a636d0de0a8e93d339855c581c8c0133cdff212bf4b5a58b06fcdc623f8867197369cc02e5058877cbc56f8f90c5e52154bcb48ab6e00bbe54ca1bd056292291fa5d58cae4e4efc43dd1190f5c07f2629dda818660d7e4839e9965df7cdfdfbeb95199ba95caaaf47fadd4f73fa44fe14c2bb2e79b27a4e639ba164abfa4816027cbf48a07c1e4be3e2f389691e2b5338ddd3", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000013c0)={r10, r11, "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", "1df8145746f242f33ac187fb584eddcd9b01f4c9f86b3e8389d818dd954540d388b821414df7bfccf539a8fae6875c4b3f079eaaa6c276faa6134a2c7085632238cdf8691dc84ba94f2675cea857d4787117c12a139de821a87674487a2e449c865c9d837a55b6d104360d73371ef8deeec171ea92618aea65fb5b9bbd5787cef51f1441574189e70b8f54306c489dcc2d3788d0e64be25a25b55ae9426be3acf0e755a8f6fc59c579cc0436ecc5b940af97c6379988a384f94c48704479c3e3c84c19975235347f8911ca10522eedd73da8b11bb9ed48402f4d05baf1d6d91eed6263a8e13cdce96520269c63470120054855a88b692cbf0eaf12ad64d0cbd433539a1f7af620449751464cc17612a5073280907122dea424aaac927ed853d40d6a288b082ec00b8fc692cd8291e28bd3e1a320112729f3077741a84875592533ddc4d7d74fad71473c8f38b659476387e64f029cd96e17d964a111a50c4aafbe03a9953f85303b6cf549e88d5431d7d5da055354e4abf5426ce1f508b07b5c418df5df117d96195c9c1dabab2e73de6ff345ac099f11de37231c7af522ebf600fea38ee78414ee956ae652ba42dd493374888fef3757f6f26e7271ddd76076b628ddea3ff90e1bc63aefa2e53e2d619821b94da5a2b9440b142fbb0fbffa65a509f11cd5919de8fd306634706f2a151a88ba3f5803c4c9cc451bcc7630ebc6b3dd3dd20fb78c794d96810970bf85d7239b842a33f454bc984b1f587c5c13ec7aede9ac9600aa61b3506aade888affaf7a5858702e405bd8884c42cd5133312669781c5f2365359905826154f50a70641f41a835cd3dd907f8eedd5d920fe655c9b3e96f5decda9d96160fa6082dae6b0b2cda1017e08ba1385d2df2ecd28ba8ff71c524a14b1a02eeb66c87c65fcbb64df389ca187783d2da6c98e310f51acab675d637455486105adf1c4d1c99b5c0ec128b72cd0a5bd6509b36181fedf64a5d1f702e4a6085b2d00e1aa90d5b54f3727126f4bc9e4731622d6adfa6c0c2381ac63108f2e8ac4d45f459b03ac8b289d2edad868b8ebc39d5819a8a0541b1bfd6f31b13bb1c83d95d17b08912f709a5d7a15d75bb23b85c69607c68233a34e243d32d7606774ddcd635b7287693451942c08a29adf41d9afb80a5c84c2a79c5c5a4d66c3dfce6adeae202874d633395bbc400c2f1ef56208a2068be51b24da5adc13957a7d1874e2c6daaf4cecc50597dc2cafb8d383f15386f3ded2b457e850d83dd6d0c1899880a65255711159fb9b33172d7a7408b8186f93af3dd68a309928b70feb4ef8bf79bcde80e77972d993fb6afa3de36c22c6a6be97d11c795a60b757683c5d0b11b2aff240b6b2d6b43faa244ce7909b4bc80ef6ea5a0c31f7dd2d0723ede2e3401033ce81dc6e4a7c17c7586cafa10cc1e7f0da3abeeea38b2740bcc15c7ca6802e83abd4eb7d9d4e8f85fe21e992a8bbab084259dff2a526c23b6454d069cd02c0b538ec04b0943b6fdd8bd77a19ac7ff2fc1e6a3182cfd95b8648dd3338c73f0a15ed7acbafd7c225179aa56987a89ab0fa7a97585f9ce616998f4fc4bc9742f88aac764b6bf34876de064789ce3ab1bf011e560b5fd840f28089c3b063353742be34dc6782ae4e8dd56040bad67e111c45d32868a424c0931cf90963cecd99113f85e3ffe4ddcc24b3ac14e3c8df784e6792b8a0e6decf75d1915fd90a8c468326a01f1aac02290c2e5958e645171f96858f200ede6d66ab5bfd6e609830ca362fd6735057c896d615c9a8ab651f10e6dac200912e1af6e3742acdc1f802126fd9b5ac04594bb24d50f8e99202390c8ae2e42cd2cae2421f8788e3c7f2eed5bc8db2d32f9541dd4ed4abb01db5dde4259662335811d315e8d2ee1b0504de80df37982216bdaa6c07355eb0951ffb649724bd8dcee7cad43156c9d65632c53d6b2c020cc6c9fafa612c70ea0200415ed8ff512eaaeeb91786a8b667aefdac07151b73a5c03fb16d6cfb2323a2f13de4ef4c1ab89e0e1e0aa9da3b231f89415dc03d6d47ff9cdd7f7cd32928285930d63b18cb6bfe24bf37a838492791fc3dc13e2816dea465ec76aca2814a335cfce0cc770473d3729453024a042a1970dd97c6e9db003167d90899c28977e36951493acade144adb8761bf8e25b5f7a42499ccc55aaa790407aef14e6f68b02d1ac8b92d7186c87db4ac6aa4b834469d14ecbb7c239bdfa97e21ed44d36f73633db7e4b2780de0618c1e0a55f8989200f5ee18f3183fa1a38deadd403e9ebc12c6c670b9725611ba48d2adc4f7bb2d3c9f2ae842f8a80b6b35595a3077b268ffed7045ae85e2fe6cf0bc35c5804054cf02021311eb56df3e2929f4128030805b7d9e043385a4278f190cf3b5d8575c6a3047faddc6e66776d043224480a5abc723f1573ad4c6a79c83f4190c23ede4bf9b2860e88e16d7f16d3516af7fd2f5ccadfdc35d7f223e7da6dff7356531ad69943e9f00536bf581c02228628abf009882fadc991143a555276c2593cced45b0026289c0addef827a8ac156ba2097ed71c73015f7dfb9057d37d8083ae48733c749eef594c8c33caa7c0dac4fc9f7a5dbdab714b9c31794c102a7ceab33407a42d74e6ba26c864a8f76334d3fea4fdb211dbc8daf3a96dbc9a715f080dff96bf2435a0256577b05d6c9622a5ae89bd6649290ccd6fcb73edae55e0e2143fa457d4aafef882b4783f493f91e0769ef532b4279976444467b35411fbe22d85345fdb5cd69c569b61d2fc214252666e7658cec86bb86a95cd324b029aeb1ad7d771058f1d5a469b90a196e42089f625ee261d7428b11638049008f4decc162ed0a2d3c21836024062efea12da1a590823ea4e838bbab9f27a148c6afc6486aa4842f542374ae111df83d5a4404fbbf44676863e7a542bab03b85e50e45e933405bb995a9b173d22617dcd7f1f01cee2a5701d4116f4cd1ffec71daa0bdfee161058f583944c4bcd995255aaed0662969d58ed683ec4cf70a4ec0ab6f25a88f548224cdea123846cad756a8cc0ce70be2db188dd6312ac2ef56409d73adbdaf427d25205a630684e74f10e9b9ab45288a2e10eb85c76056215055e53958a79099eeb20cc1bb1b5e6e8f49d31523a81ea98fb254c1649f36756aaa4a9e6390d93ab1682b70b63617601038ba532129d82d6c5e24b3ea23d4407805eccaaa1ca4bf5f02931851308f6772db9fd065efc97894e41d8f69ddb2ad07bfbdec8b372b5725431486151a021684b57aeae7d0a32726b334d7c0b1188ad6278eeb0633ca0b4e29ee726096a029d70ed750064318900b3b95cb81b397b9f075cc5b585337b4b39aebc416a60c3a1bfe9460c969eefae9252d21da690f023c0bf7a3db9f3a8479fbb7728eca3c7974c982022946306cd64954d3d1f1e15c481f2ea0f6e17e3faa2507737b09edff89d25e49b377a5452e47dc4504262e19a841b8b864de8592cd055f473823f6a0b0c699327932e76bcb0c7e9a60e5b23a28266fd395f3a17a9bd31c6727cc0a3c5c340c64f94c3cbfaf43f8f847a2ed463af596c88475142daaa6fe043c157b68450c0efad203fc07da918c2a7ca586fa9cc3fb5df33e431f665aa17754d393cfccc9d3d302e22e80d411c9c00cbe76e53b44df29ac854e1a377fb51a8c3a7a12944469877a6892ac7d256c6993d426e93a564cb411692022bd476d292ba5b9c6a8a1a36df0e8d566599bd3976fb5cdad72d29e6ab9340e631a4d4891cffb87074f864ffc9f9ae3a1ecddd35cb5397a680f69d7d7fb5c969c266bf31657a417f92920011ecdd51bd5418e3666b05d09ca7164730c48a4d8bac476812119b10fb34f02e0991e9e386b21a3894b942f3e35616c35bedb0897799088e680d2b7b09980d0e26ccaa1e68c9329b94d81faab608cf9a7ba12989eb9d4cf9e5bfecc8a3c5724bf320dacff423e863cc5649246dbbe3a4557a262adeab9e7633745db1406447fd91f0611e7c2c1cb2c16168b490e7a17684773ec2cdfe90f827006142e872df598004384b2aa685c33af4e608ae228810f03942f17f1bf103dcdaa133ba9c4ca26a293dad1c506cad6c706de52b176668e2ea51c400ab97e21e8b171cc5262fdbd864b5c5b25265f251952e8765d3ece71562069a621cbdb5033f355634176d6b9de1b13eca1c7cc2784d9ff6e187ee57b6971f599cf602d425d0ccc8715c915c53c6627afc1dfe1986b8a18c33bbf36a6cc285912a256d9160805d0a8a30ef36e5ef51b756dc2f56cb872c40408b8af81e94e38e190b19aad24476fea3532db336b21c7edbcf1b11492821ce6327e1fdd1400834fbc479ddd64e96b32f7a2476cce8a99de68e72871c42d08053c2ca4437f12a79c83a5de2253e210c7a532867c5183a0abcc23e1f7da22e35a598cb4be1c7567a25d5166506fc4b9c8cffe278be1178026f2834b3aba73211dc86dc02829e0e6ea481fb8422baaaaae2f8b5a398110c3ad141c734e2ea72856f79732176a1b896682a4eb69b143cd0b1a919855fbceb31623573844e4181a4e9da7b39acb373b3699f934f5433a83b606ba12537c42476bf36b43c4a202da7a09e857708e70649aba0f18836857012012c20f2346571c0aff803a35cb418038a81cd6cb69bb9bb7abc9c60bb46c9abd3d28c9ce4fce6a1e231ee8016d81413a6b99a5d78c0ffa82a23382d22e5381d025356ea8fba248ee616fd0e9718427a09463d7f647d722137ef1cda9548bdda1961d0f011e10f9342fad5f1bb44e8d81449eea309efa226a809bb24df6a6ad1fb18e3be6bbc964a9d0e38e2bc4f20b85770a437f2e53b57ad0d9f68280958737523846df2e3bd8b9ac134bce58b6f3b92836e391bd7d3da39613aef34442c5bf74fd3f425aeece33deeed88aa811cebf239ba0abfa1ae6b4d53394f5ef0743c41367ce662ea619003d64cffc0c218d453c7d3830f898925215618d2c8623cf3cdcf7a5edbbdacb99b1193431e640dd6e5ed1435553bffd3dc6dae07e3920b4c1af7ed6b4d67da83d8f77f14ad5a3caa32c12a423304558397e5051350e2a086703716ee24da3afcc5293cbee6c4726cd8f6bec2ad154c4fb454a85e8ef423ccaaf97d236fb634c8fd6645e862c189fe65a459ef85f570289e5ca4a83632438c2b42fd2456266d7ef5c31b054c0138cef9dd16b4ff74f0920f17ec0f31520350327ce770209c8222e52095bcaaf889ac354068bb5f1d5c85c5f8a459fa0797e98ebbea345256e1909c7781b891637ad2f3c39ab5bb7b2812b95454f484f61ea9ead5b2791c38a31d938107e5f7910250c21d39ff8571580612fe5a6eba6a6dfacc086b6c951cc45a66e98afbbd3be7ac6c41f1f0ff945415e4e9c72e575b34bf80ff7273f2"}) 20:25:47 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x1}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r7}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x400000, 0x85, 0x4}, &(0x7f00000000c0)='./bus\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x89a0, &(0x7f0000002800)={0x8, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000001200)={r8, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {r8}], 0x81, "7464fbe08eb369"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000013c0)={r10, r11, "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", "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"}) 20:25:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 20:25:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 20:25:48 executing program 5: socket(0x2, 0x3, 0x100000001) r0 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450e, 0x9c09, 0x0, 0x0, 0x0) 20:25:48 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x2, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:49 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450e, 0x2400, 0x0, 0x0, 0x0) 20:25:49 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:49 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450e, 0x2400, 0x0, 0x0, 0x0) 20:25:49 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r9}}, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x400000, 0x85, 0x4}, &(0x7f00000000c0)='./bus\x00', 0x18, 0x0, 0x12345, {0x0, r9}}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x89a0, &(0x7f0000002800)={0x8, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000001200)={r10, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {0x0, r12}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {r10}], 0x81, "7464fbe08eb369"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000013c0)={r12, r13, "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", "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"}) 20:25:49 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (fail_nth: 1) 20:25:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) [ 1518.700297][T13436] FAULT_INJECTION: forcing a failure. [ 1518.700297][T13436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1518.714842][T13436] CPU: 1 PID: 13436 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-00436-g173ea743bf7a #0 [ 1518.724967][T13436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1518.735046][T13436] Call Trace: [ 1518.738351][T13436] [ 1518.741302][T13436] dump_stack_lvl+0x136/0x150 [ 1518.746015][T13436] should_fail_ex+0x4a3/0x5b0 [ 1518.750729][T13436] _copy_from_user+0x2e/0x170 [ 1518.755453][T13436] snd_rawmidi_kernel_write1+0x355/0x850 [ 1518.761221][T13436] snd_rawmidi_write+0x277/0xbb0 [ 1518.766185][T13436] ? snd_rawmidi_poll+0x680/0x680 [ 1518.771240][T13436] ? avc_policy_seqno+0x9/0x10 [ 1518.776015][T13436] ? selinux_file_permission+0x96/0x520 [ 1518.781567][T13436] ? security_file_permission+0xaf/0xd0 [ 1518.787126][T13436] vfs_write+0x2db/0xe00 [ 1518.791377][T13436] ? snd_rawmidi_poll+0x680/0x680 [ 1518.796417][T13436] ? kernel_write+0x670/0x670 [ 1518.801098][T13436] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 1518.806741][T13436] ? __fget_files+0x26a/0x480 [ 1518.811434][T13436] ? __fget_light+0xe5/0x270 [ 1518.816026][T13436] ksys_write+0x1ec/0x250 [ 1518.820366][T13436] ? __ia32_sys_read+0xb0/0xb0 [ 1518.825136][T13436] ? syscall_enter_from_user_mode+0x26/0x80 [ 1518.831038][T13436] do_syscall_64+0x39/0xb0 [ 1518.835454][T13436] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1518.841363][T13436] RIP: 0033:0x7f5cdde8c169 [ 1518.845777][T13436] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1518.865471][T13436] RSP: 002b:00007f5cdebdd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1518.873900][T13436] RAX: ffffffffffffffda RBX: 00007f5cddfabf80 RCX: 00007f5cdde8c169 [ 1518.881875][T13436] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000005 [ 1518.889845][T13436] RBP: 00007f5cdebdd1d0 R08: 0000000000000000 R09: 0000000000000000 20:25:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 20:25:49 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x68}, "11c1517cd791232b75a61a8dbbf4c48ddb23bfe7876fd676c389fef818a9ddc2befe53ad0379a398ba78870a4958d279c93c3b45d05c13049ce5050ba68ee5c2b920ff5e63e36c8e2126566bf80aab11d2f98307e831f6cd1a0ddd8e36d0aeaa084da27ef8c63898"}, 0x6c) 20:25:49 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (fail_nth: 2) [ 1518.897835][T13436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.905813][T13436] R13: 00007fff8fb8441f R14: 00007f5cdebdd300 R15: 0000000000022000 [ 1518.913806][T13436] 20:25:49 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x68}, "11c1517cd791232b75a61a8dbbf4c48ddb23bfe7876fd676c389fef818a9ddc2befe53ad0379a398ba78870a4958d279c93c3b45d05c13049ce5050ba68ee5c2b920ff5e63e36c8e2126566bf80aab11d2f98307e831f6cd1a0ddd8e36d0aeaa084da27ef8c63898"}, 0x6c) [ 1519.002126][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:49 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x68}, "11c1517cd791232b75a61a8dbbf4c48ddb23bfe7876fd676c389fef818a9ddc2befe53ad0379a398ba78870a4958d279c93c3b45d05c13049ce5050ba68ee5c2b920ff5e63e36c8e2126566bf80aab11d2f98307e831f6cd1a0ddd8e36d0aeaa084da27ef8c63898"}, 0x6c) [ 1519.067274][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1519.137985][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1519.162078][T13450] FAULT_INJECTION: forcing a failure. [ 1519.162078][T13450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1519.194109][T13450] CPU: 1 PID: 13450 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-00436-g173ea743bf7a #0 [ 1519.204237][T13450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1519.214286][T13450] Call Trace: [ 1519.217553][T13450] [ 1519.220471][T13450] dump_stack_lvl+0x136/0x150 [ 1519.225144][T13450] should_fail_ex+0x4a3/0x5b0 [ 1519.229819][T13450] _copy_to_user+0x2e/0x140 [ 1519.234321][T13450] simple_read_from_buffer+0xd0/0x160 [ 1519.239701][T13450] proc_fail_nth_read+0x18b/0x220 [ 1519.244762][T13450] ? proc_exe_link+0x1e0/0x1e0 [ 1519.249553][T13450] ? security_file_permission+0xaf/0xd0 [ 1519.255094][T13450] vfs_read+0x25b/0x920 [ 1519.259256][T13450] ? proc_exe_link+0x1e0/0x1e0 [ 1519.264041][T13450] ? kernel_read+0x1c0/0x1c0 [ 1519.268627][T13450] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 1519.274274][T13450] ? __fget_files+0x26a/0x480 [ 1519.278942][T13450] ksys_read+0x12b/0x250 [ 1519.283176][T13450] ? vfs_write+0xe00/0xe00 [ 1519.287584][T13450] ? syscall_enter_from_user_mode+0x26/0x80 [ 1519.293471][T13450] do_syscall_64+0x39/0xb0 [ 1519.297878][T13450] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1519.303765][T13450] RIP: 0033:0x7f5cdde3df8c [ 1519.308168][T13450] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1519.327764][T13450] RSP: 002b:00007f5cdebdd160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1519.336189][T13450] RAX: ffffffffffffffda RBX: 00007f5cddfabf80 RCX: 00007f5cdde3df8c 20:25:50 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 20:25:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) [ 1519.344152][T13450] RDX: 000000000000000f RSI: 00007f5cdebdd1e0 RDI: 0000000000000006 [ 1519.352111][T13450] RBP: 00007f5cdebdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1519.360074][T13450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1519.368033][T13450] R13: 00007fff8fb8441f R14: 00007f5cdebdd300 R15: 0000000000022000 [ 1519.376009][T13450] 20:25:50 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:50 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:25:50 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) [ 1519.404920][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:50 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x2) [ 1519.547190][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:50 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "924b25d9abb10ef46cd7f1949d7f799e166148bf8c41bbe0bd9ad72ffce7af4d20216f05cc8add5bf51738fc6ecef96908ab75b217e77ef0e4688852335a7788774d11e9f6417ac132b635596a4ab81ec280643db86b525360bea413f9955722e2c8db85a5188939592d1e21cec5eaf10d90e292226b664934beffce3a46e3e2aec2ebf2b4a692c29cd76c34e6adb817d60ff69dee029501063e1a9b4c9b9a7ccb44022fe23c4f89376a993c661e1b44d4ed6de6f5653c0053f783f283b83fa14dde80bb8eec84cf0527a91875ee9203e9fb94affb5faff7a202ba501cacce7c77a735047712b317b093ffce5e747686c4d991c4ac8ba11234f996ac2f244149c3531206f4455b63a61c1b464026e0cc5eea4875f0bc6d21a8cb799657c287de765b8445fe76bfc4ceb530d5ba005a3e164f587fb8ad462eedfed2af60f96bb3495d2e0e8900cafaceee1311dc5a4c7ab8e6f08fd4dfbe12ae4cbbbbc5cc1da92c309a67b5c74b9bbf0eb9d3e1bb66eed7a6aa30cd617d9f71fa1e2078ccd3b232b79556b16c84ec89045fee36116b5f92127757ff212dee94e5cbc4ba37557a1168360d71df8c1380973a580a0a7a03ae49aae9b366cb520468d242970eaa7e6cf3efc49ef446d0dd776671d21100d99b969be93787c3a74b3940968186afe380c18cb7da7006ca845ef67eddf8d08d64ff170c7b3b9cb20fc93cdc901d73c934c852355c6704281d7d526825f8607c8e93b0260a902b606f4caa0009f946e02ac2ceb40412e3c48ca0d625a729bb0be65f8d7b1318849c530586df7fc34efdbc0f1590181171cbe53865cc3d264083a354c5686555df60d9bbb49dc67e3adec5dec09c41e3d42bea9fe0583a3f6b330b75f026a870a70835973db6ba9109870f46ab76baaabd73b7aaf68dee7236db5ea86aad3d305d695511569349ad9ae2aca3fc6e9879e260a5ca3f350f735517fa75a5ef79c433ecd225aa34ee622c5dcb8acf4f023c9f257f228aa00781ffb70e4e851130053e7a8fdc46a1b7b5f4ae9c87895090c94a5f7fb76e27433a9e85f3765e7bba70720c099ef9431a78759bd2672efa48cac4d41ca806a2faac6248b6a1ae479a99675720a070d521659aae5b0f4f3e128f5f3187196520ee9bfd30dcbf71ca14b30a85c647f0f2d176a533b31c63058dc730352f52d3e553f64913d74dd4c21cba23a5c47ce495f07e6f03d7b65bb9aec0b9867df401f5c3a74b99c80e54b059af047cf76336371ac21ee28f8fbaee9d673576be656cf8b615cf20d768c6642301d9aa71895a57865a257f398cb6f3ad082a2c57692333ee952853c99d33d14e578c91ac608505022c1c814895dd5bb6c45ff2fa8cf88cf05550030375ba9cb180dc111f9e43026dda34326fa4a4377db5f1c87feecb7cb2221486c113df8871beb8de454a7c285e98b4afee2984cf5a4684f3a444f7034d947b23e57c51e260141dc83cefea9db0a52ace3ca6664c3ce06a45cf861242e7213f3545f7f886c5d536ab6ac8afe7a79e7f7df168774b3b1b7d8ee3bcc6ceeba1040932ca28df402a793ffe6c2f6402c7c07edb2982312a20e2412316e40a8e51fbfe9788dc654ad92128d328f40bef0a87755b96c358c33d73911ccd88de60d6cd04411c0acd062204897b4544ecbb05138b2fedf8df7595ccbfe3d655977dc6dec9d4fef41c498c6804e70c06e9b12873ee31893a74b4228376318cb9c0446e6027f638bc85cc5ecd948a3842b31dfadd604aafec75476ef393bc152b3274a3b692dada51e267db1e47d9d682152a4d05c029bd827802541e5da884808b9cb3b0af259419fd938e3356184e78e6667af246adb4cc531f00399debc690f21eb05d391dc1b797527a5bfa221528c9f7dbd0dbbdce4789500f35b663d8eff221452472f44fe431bcad28872ddd00e046603dd67161c471a904fe96e8040e2a106510771f8a711dca917803e193ec056f2800570de7c6eff4aa0aa8413848e3a6ec3a6334cd60d70ccdc339d80dc05a54060a8020a5219894375734dc4f2b98e30518ead904b01599983a913bc76c4615edcab57f2fb8a3dc0213e6f8e901ca90fcc13cfc86399323b89e7bda67c4d4836250f0b7b1265aed02d58bfaf630f9c9ed1ab4c8111310762118641d166cb18c9a23ef1e91cdffea910776b0fc0970aa53a0ce5e5c8ed0cf8ee5cabe2e8a83b8b835f84403efd0c2f3812de210da693cb77ef5bc68517dd4fb12583b2ec8fdcd52e2cdddc2f9354c4342dae8ee92dbec0c6191ef9d57b94708ee7a00df014d8bd5f5129c781f3e7740a0cccb25e14e74c1842253c2432585c7cd3b85d3a2bfd03b334c1d86d7aefe35d74789f3d6d327ae5e454e066d8cc52b557471f020ef81256a2cccac199bf28a5ca7f69edcabfb59103d4b488462c20e7656a00bb32d60a383f4145c35da357bda5ea820d2fa9810eb613d5c95027cfd2ae60eedf4f0d418721dd3c0defdd0974abb48634525aa5067920dc17f2d7cf28b50d13fe3ebfedc784aa1c1f088a543e0fc3b73ade9776a63f7ee13ad178c5296ef82b7e6bb981e41d25798d043f35304165777eecff119e02c310188bb2f8f870b6524c4f8631917c8a5a9dd99ecc78fce6d66613da183e5bda72fa460106b8b1cb16b03bc28f1cd8b4f7115590d656696ff816b9d013c851aa6b575b3cdaa96b91a430b47c8660832d720166225be64b80116c5c06f2d74510ed41d2929592ff95cb2bdcdaff7891b14968fbe9bfae1b94d60e34135a6985e7cb0ddd5491a118984f67e220c3930819e10ba2e67c1a45e5aae35c492701aa37e8679ff6cad7fbbf2942642229867f948044b8aad87a66c1e56d19bdd0f7ca7ea3397ebcb94d022c909bd9a2bb4d188372f5a1364d326679ffcd8c6f117c7524e51d68921e0d41bc4a7bac3d64120e326a6b68a199f388ed8848277b75a5a3e58912cf4fb91cedf7e1b4b7232420997dd575b76bd041b8202951d8de57ecddfdab8ba53ba052cace5da17eed7c473034e752e8ef118e13c19badbae0fc9c02be7de42e4e8f33024c5890423563634c91d968637a64fd879c9f5ad47fe465cc59a299eea5e38179fe7ca13931352fb5213070a696d6c3418e8ee8daada108879b96b50d7c78975e2984fae6e172ab834d69bef5415eae7dcaf6545f3e4905c8344e1353ff534fc2a31fd6e0500c6bd37295534783543f508afc8684df080deb600b69011b503fc175d3e4653c0473c485303cf8a75273bc7c1a5b5b9f43cf11dd1bc911c22db29c672532a3969750bdcae832b0c05fb3f7c3b96a252d3c2a35e3fbca933884485477ccc74578f2a782efe368efc8b454c1742c441f6c399d516595c85d7684855ecc2e5811c6a5ec96fa1ca415f979b01671f93c38e583bbb6117fc8cbae1880764f3007574cd519b17c3b8213638ed0a879bb458f63d366366cba651b5c72e5a3e9e8eed1160160f016e78c28ab1ee0785054908b417f80fa281b8671bd4f888e583ebabb59ca79bd7ebcec55e3d2d20746403ecafaa9c455fe94b4fbdffaca30120baad0d5aedc333a35a445bfe5aedfe41f7bdde337418cb0c467f5ed1653d51bb6d9617447a9cf24d8f742c0b97bc497840807bf958a5b8f930d919a587b1bfbe3fc7c1f224be8f2e8beaf8dec7398474a818bdaa83188a62288398ba84b7311161d8c4eb3bbcec628b4656ba2fb0a49d4d6851670bd2636196225a915c681620005e6daa94210c45b370eaab8eb0f4e89aab733332b017c1775463406bb6c50fd9569ad0791ee207cd87a6591a16e0e876772dce288ff3a8f0ac1cc706cc88a3e7268a3946ce40be261d0fb9e2b15cd4bc1cd3902ef6e9ba28cc7d8fdd9aec5f1c37e0798afc5e18b0465934b634a2a05f9abb7f5cd283b62db3ad516d52e5fd682742e6df6663f57083f50cd7256df7cd02ac54b7b25d5d4244a39315f9d5c9548ad1302fc72bd317b0ecca067d254048187028cdf3555e9d663bb6807a559827af97a6b18d7b54e885ee038c6460250333ac524ea7027163cae02ddbf26b81e3ae188367bb42e097a0b9dbaf8d67f97aaec945c9f2bca3f39cfc5ab6470ee3e4a02899a354256731219881cc2429bbd6b952a99cb2f2c9d7d092c5d455234813d315e83e0e5e9bed84595f80e8f25bb12c2a5d74d75e9eb10110eadf6193ad5dcd075847568d2a37ed3862141d0e4ce4dde9230e5d279d43fe86580fce734256d88631599d97b4fc8863199045ba7f23ab901b35eb135ba46b28e13c1a28a216d3670c1a74963bd763eb9a5cf5ee99565f65794946310a47254a246616c4fbe5df62c263b821d520ccf6919a9afe1fd109a1c940d149e43a3285e452ec0111ebfeb417c4a5de2423fba369d7f5de5985d65a33eb1177c7a3a5849aa78e841bd2118e9915824b5cb6bfc83a1bda33633fc1e28d9b33c7895ff5721e180048d58f91f344e1bc3f4c1720a8941600bf4e635f99813e5c4d56404bc61f338be2698398ac77672ce07db4cfae59ff59cacb61d07e9901c971861f853ede17b1f9543476186519613ae9e408bb3f9b83ffe115af34122aaab8244c917e95cb2a3e0eab51887e451ba2da0d2da9150804b70eeec90cb9e1715e0f0860c9cecf555594d6bd7c093a17f3e1e34ac442f81c029e1a44a18f9b0d1d86e8f42bf267e498d5c0e099ab478a04582756df2cd5c3ea8018b86f91b94d734aa19d5bd42b87f91b56b1822cc59fe9f92a94673b19f58c60aba77d11ea485b0cd7d14d11bbbdf24780c8bd3a994e07e74a99b15cc01586521d7f65454b73df8da15952de33f1a387ed10f11154c706df3a4bbf789c3e4191edffbac038371adcb353d6280e6b98e6fefb054b0fb9b035db2e4f538494b1e69d2feafb1e6a9e444894fd8a4b6bdbad7a7a54e55443a90927d860ed6c7eaa7403fdbbe158d6042e86e0627286a966e3823e48d8665011e945e5134ab9f4e514c8fefb243037e479aaa0f37e6a2b4ccae203b14bc73f0c4b9362bf49b6c2b106c0001bf1e098b6a5e2f335a3a38bc9606c219ce9e5293755732157400f76317db2a904a8086e284756adaeeefb490541599fe9c82f50026fd304b6ec1ae6071cc7e6cdb717d9fb8e645375a3564198a33312b3978581833270c36ca906a95749a7e5410780cb584e0c95be187384116b318042c9fe6d48ff5a97ebed78321074918fda32e39dab4111bf2f12649d4f2d8fa1177f65175b3ed857bdad1dedc41ebd592ef15d868153db60c8f6e208af84f72bc8007e6ac7540311cf19647ece1a6e5c07f0191ccd08fe99f679eeb4533a05f6429d9e97221c4e2e74787246f8ca421bc08634b3a651340c0547d69c5e68ac7475635111b5994959faf2d734f7ad9a609cb21439c62bd1d241d7fbb016e67dd86635521b829bad9e32d027a26ddf0fa034c7939d4e84e6f2b6226a4e85ddcf3b2749c3ab493675ffc3b7f2b357f30a6558ca3a8e600acf9cd386426f7addda43f007cf0bbaded929956ec059dfb2e7d5a24fa5a2086c269cb5d38e9f7e172940918992842380a5ecc293db5e042923a111fb1671b7ea9db56b1774724e672614bb9fd1cd97d6d579fb4808f1fefad40db301c7c024330f2568786a103545e67b93c83f656dcced8cbd880c685bcc035c7014735df868ae56ef030a0806bb2b606e5cb71ffb0753be1192b73046413ac0b67ad4b874d570255783e40b2df6c54867cf40e4e9827f845f89db8782fb98977094cdef55fd2d47e3465eb3e17227ee46f0f6bd42"}, 0x1004) (async) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 20:25:50 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x500) 20:25:50 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) r1 = socket(0x25, 0x3, 0x200004) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)=':.q\x00', 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010101}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="66c019ff39553ded1b97aae8da350000000000000000000016000d1f89c832ffffffffffff70abd655c5a0b28a86d2d21551", 0x3c, 0x40, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x6) [ 1519.905062][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:50 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xffffff1f) 20:25:50 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x7ffffffff000) 20:25:51 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5dc, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:25:51 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:51 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) (async, rerun: 32) r1 = socket(0x25, 0x3, 0x200004) (rerun: 32) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)=':.q\x00', 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010101}, 0x10) (rerun: 64) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000100)="66c019ff39553ded1b97aae8da350000000000000000000016000d1f89c832ffffffffffff70abd655c5a0b28a86d2d21551", 0x3c, 0x40, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x6) 20:25:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:51 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5dc, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:25:51 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) r1 = socket(0x25, 0x3, 0x200004) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)=':.q\x00', 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010101}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="66c019ff39553ded1b97aae8da350000000000000000000016000d1f89c832ffffffffffff70abd655c5a0b28a86d2d21551", 0x3c, 0x40, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x6) 20:25:51 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5dc, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5dc, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) 20:25:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:51 executing program 0: syz_emit_vhci(&(0x7f00000011c0)=ANY=[@ANYRES8], 0x6) syz_emit_vhci(&(0x7f0000001040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1004) syz_emit_vhci(&(0x7f0000001080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdc}, "8738a9f0037abf2e492eb1e9c8f806dcd12357d31dfc44ddc3b02ee6ea15d033c80b01a6df546495a7903a08b52838e7b21f202bd46021625dc85c000509c4e4ee12971f8b5e69bd632f3bfc8a5e073581db517328a3815ea6f1b31d00961a9a6ca8269df6cae95971ca19dbdcd63983cd663115366dc4d64d7a1631757855083a9294e7ddc265d39e7d5b13a5835d9173a5db682f08b3a12ad9168d591d6d50a929d11d58e30708fc27e6b67b752245463cb5b7c174c6d8693aedf9ce0f84dbdc70658514e50e2ced3fe390297d957fd1ed29d6aaf586b83692f348"}, 0xe0) syz_emit_vhci(&(0x7f0000001180)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x45}}, 0x4) 20:25:51 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x3d00, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b1}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r4, 0x5fec, 0xe79, 0x8, &(0x7f00000000c0)={[0x6d]}, 0x8) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) 20:25:51 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x3d00, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b1}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r4, 0x5fec, 0xe79, 0x8, &(0x7f00000000c0)={[0x6d]}, 0x8) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) 20:25:51 executing program 0: syz_emit_vhci(&(0x7f00000011c0)=ANY=[@ANYRES8], 0x6) syz_emit_vhci(&(0x7f0000001040)=@HCI_VENDOR_PKT, 0x2) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c80000bf0628d490c6fbc0ef7d0cec7c97d9db72516e4595e97140be2c9e5a2326195c5606cd95fb0ae807a9b554b104a784e9791ccf9296397d5c6921d66b5bcaf29d960c8c233edc99c9b1aeba1a7f141ca5e4d56bba0f1514c6fa88f3d2ee8a0f776511e5cf24c0b74d0600fea8847bb125c88d94d0fc5c19c6eb262f2fa4fea5c74c4a876c7ac24a480772f6c468890ac0eaa9b868a94cccbf53103e188c483fd8f48360de5a9fa4f96a71fe18149a7770c922fca1de9df83755a83c7a9f1f41553a18625e4bb25be43f7cc2ee566121d32cd3b26fbdfdaf95efc369c83c840e5afd220cc112610e4f08d28e8f6617971b4f300f40b135a4808d139d3deb752f67cff4a487ec544dd8b47f28d1d9886687418185479a597a65d7fc1013c34bab1d25909a859dd210a9263f6d73c998e09fbf0ff841040bf0fe9d77c1737192e7fb2029a2fa78ce861bb9e7bd1140b5e22d6a4f32f11b8cf6d9fceaa85c8cd6563ad45d41bd648c06d9f72224c8c8d9ad3fc5123115370a9bdd53b0051bb64dc7f9739fba7142678fad1f9078ac00fe8c3da6eae3c614f2904ef7e9d3ef065185ec9ed7b3c54709bb8a756130c7a3e8e5c9f314e1b14e0576f9be0a23889fe66c8cc2d9596c51c450809023a9704d29c7ca98152ac45d8c9340987a53c443232b1f9b72de9f12c004846a183a3d8e56ca11ed014c5a30123b2e2676187111688c824304569c5f60beb94bb8a89d515ad3fa67d02b188ece80746cc64d89d92e7e5ce491863ab24ed9103730d400033a8d9d0ae374eee9433bb0dcc5997e1bda16371fb43bfc3e26595d9055867403ff60665f9c3b8a73ea7030f5d0dbf9c67a2da2339224c3b8174de55709d724f366b1c88b42a2d7a7d6ccc506967c47efe135034693a82d1f20114592a76209c33b374116433150abc0c3f8cef6fbd476f29c2349320d22a3aebb41fdb203530323f669c20992c2db5bcfb61369341e52b3604adad9e3067106537cf9bdb3a704500b341a56aa55c86a8b3ba7c0534e6ef3f114141f82a587a7d49ab38e3ebb4e4de315c854da87ebdf7f5895a830c786ce2fbe954edfa6fad50ca59f258f2d0b88d956a540a6353957971362873347bc93af0e13ca2f77caeab2bff12eb4a3eafb01aa2f9600443862e3c9d4a0f8108411958bbf16a58650f79344826b54ff96b2f666682ef5ec32e3a7e6712e9272ea33662f5a042428dfc1c325af1da1b4812c026f23b8dabe1d327d24e2671d9b709f83d65925c83faab77ff204730946e0d080f4133ed4ad380f1fafbc541bd39caa37576ab93da91f31dc7ce08c073c89591f06737c2429af9988b72ca50e9029595dcbc704c7f64fe135c7d83731fcf8fff3255d0cee1b100ce4a72dfed869f4cc4a7fd3d4c7ecbd5818abcb1f6c534cfb3098fef8e6979717f6cc84867e450dd43a82ed7c192290a769f4bac56fd4af6b9823d376ff2eac70cecaafc3ae2f1477159b2fffadf7f98ad827370cf78071835e48243d8f8c035d2a4a3944f3f8c6151a9d1c0d3613043de74de10fde87674e23828c0c70d6998b26babb9bdc65682235396abfcb544cf19cf29f1acbe4ccbe2ecdff851cb2f65f352fecfda77be2ff89e701aaf38c0df642b454b66720d6fd3d8db9cd14b283e6675cb89df22520f608a0a84e3b12d4916daf0543c91fd2fc1196f4a544b1949061d14cbb85cdb7b7fc53999740dd40fc7fe0c103ca02f7db22e80d69dc6ecd1ba63b5e557f21dd2d0239b906390e3b2252764e8f089ba42c0d61c3042572ad8050e6a1c7f4e345e91e7aca0b1a8a455259f47e88d98168043dfc8b7f3ef57d605d7c5deee4c18710b673fcb67c713500edc887636ab28020ab30f2da55756285c57fe88a5a667462977367a6e21734d8f8ded978004145aa2ae2f2f79521f283957df612d66455970db8d16cb26aaba530c6df4ac9e7ee4278db7a11f405ace404ff79d36287787ccc41982ffde79ca91f275ea1a09176e4aab87d01ee2ceff0bf17554cc7ec326b88fda35f5464aa162aeac70d9c88d7165c70cf9e3b6ef57b78dfdd98b5b352382b6b9b18cd237257b611efee7007fab927200b73565d0fbd206247df9f3aa27ab17b0ed6a986264d0eaaaf679b5ff15e2215788db3721e5ad10ecb6a63a446dc84771a00ae44a389fd3173a9037d3d65f091f7ef35ca23cd0a85998d1903dac5cf040153758ed6b32836b48feaddc17b36147febd18d7d19a71bc760cc5e7fcaa07f04b9c712ce7b30919f54dea761a4fa956c4e3d792f2aa47d6457bd0e16802c175e0c1926c95b784f4365e685d0edbae02fd19b5edb7970e0898d7add5e04dea8da2709ee8f840c3c0b7154d30bd6c4f07e27bb0044c7f4586c519967a69082c6c6b414f269d63ea12634d42e3b55ee15091435edefd1d0e586a47205aa0d50c7309af2885f926d18f9a97d827181062bf1b8cbc483a886a20e9669530683a028caff00635352727519afff7538df076b4822882c6c8da9c647a18cbc56fafecb63b49f87038b0ad752948935a05773781d5eb242d5055b4aedf877ba3539b8892837cc75c6a3adcc89649010defcaddc6eddc243a97cee868c33b1c70ac3b4ef1ab9f90dafd090f5abcffc718b8c2c6383292c74931f61d159933824907f1fc5a186d883cc881e23053ed82512537db7969d01978627d8d63d27276e968660b797ac42d05ec842f743f340fafe0a34d082309d6c735504f4c765d7c836a34a2c97613fefd93da5cdd06d93df11d17374be5bd50776ff5334b3fc9929c6480ebf82bb7ee0932097af304f8b614723e8cad9259f9e6c6491e7eb5b30f5ff3dc29f5aef9f676da2d0e543af28df38b13c1e29b82cf0531369c8c1e09c32e0c1dcabca9d863242967871d3e42964d2b26bcd699f2295037c6be76f0747dc6eccc30e91eb8225998b164a385d0071745c59c4fd7e94dc33e705f5ab289f328b9077bbb31764e890b7279dee2792a3262dd92c7cce2b176781de5b5f0e74434d0f044764326ecffd9150d57b5d117589801016b5d651fc50d60db8b01f41b3eae1587e0b0c2bd84aaf5d8c662805e8e9cc9ae0a36839bfea06e309581052bfc59e89398949426be7a4e6a349a50d396d3139b67bd4da6e1a7dba0a258e7ba95f3de9d281d8829f63ef4f969a9982691780293d901d1a59590300213daa2dea6625cbc3f2e2132e2378a19c583f2e3cccc42e41c716efe42f61fa3d37dd16ce70ba7802d23eaa96c692b58ffc950fd787cfd6e6bfff8b7503137cfe1546e9d472237a9b685b27812871946490ec8ab95d75f8b5c65daf05cd202d24e1a1b006f5148423c4fde1e82ea65c1ea5ab9dd71292fbc0de3c43d076397e6f3f7ae3e99d25f83de01c562fa3725831f0e944159ac08721a6167544d459db3dcef21746ae420a394d814c179ffea2971d402f20b098bec65ccd50d4543935e9bf18f00fac9ebbb59a9c75e8907afb8fd95482dd4cf1010d63b5bdd68a4976403781c99db98cf6da3d5357a6f639a1bf48feb38dfddcf57f6f826f09c63bc68dbec20818f07738c0e9d2ed79229bfb44157ea42bf59af64ef38f4f8783276c6802300865df16f0c5a20606c921d42fcbaacbbc28a0e42f365ea84621951ac7688c96bfd51f958f58a13edf1e969bc3ac4ea1a731f85bed54c007fa93e6b95880c0c1e189f7201453a465c41da79d0571d30981e8b83232aedbf0ee35fc976e1eff41dd7e99ee3ec65d646e8667eeab515368dfb69b08f261dc03b259ac0e5ac73838c5b2e25ecf190c283b0ecfeba4149ace648ca2080707b8e25d80ffa5f44ebfbd73bab0285471ddc0b5e08c7cd7231152bb163c86cb3883c5b4dd6a6fd65b9d4d97d0ec50396540d185bb67db1ef19d48f7531ec9a2abb18e4fa87d04f252df8ab19e6e565b018c9b5abab824c82cb5c3abf2e58b58db282392d87f06a55355673e69c97ed4809736fb362b6acbb60e0f6a759618cd6b9a7d742046dbdf545926741b6589b6b00fe147a910e4b161020e00d65648d31f76bc98392297bd01567b8b0e57c41ee037d4361d0c8756b1bfeffeae4d2561db6a944af47fa2db3c4eead8f2a3303505ed8686b5c7b1276bb40e18654e6fd4fec6e8da729ae3edc0973d3d51d916a45bbc0484dacb4073ebb4c3f12227db139576bc2e092ffd1085b64bd45aa0272bcb0599ca8c265bc499f95d95854dace832ad21902b1a0aeb169ef53b593b35c3ab54daf55850c2a0c645e16332917472df7cb5165a154318ece3b58ea6962903f02dfda6efa7209b0f920eaa61372d1cb7cedc70aff4ed0d8844a5d35790a040f2789e0b22527b957fa8d7458a5bca8c3736550c8680a1aa0238d8ad23028cf30abff2246a59e89b27520db372f85b0925337fea0de5d67270230b26f04e8e09bdf26336bbd51ddbd27ffba681a84d121270865bb94479ef58e2c854ddc53eeb03e1705d6bc9af6e85070b1278d6d26793ad33a81bcf8e1ab30173e338fbddc8763da507700e5d903b613f6e35acc76a6562b6986a9324c033ac964ce8423c2eb8fb3bdad6a7346ee48f38348d8cd3d607bbf3cfc624947ac3dad6dc2e748c7246971ca8f81ac55c3f7f7dabd7622e96a0af0633a267aa8ad8fe0a944590608e7f08b8c3e545b958b3ba474130ae9d31bbd28b7da5959b6e5bcd06c95a8a8c9efa7783bdfc2ccb111fdb00bc10de5bd9c3b82d7c759129d732cc3fa732db9430cc09bb1174619e92484a2f2bcbeda538a4980f9aa16f4c3a7ab104ac22c8535c95c18e39a231ad032734cefd0b7ba66a32e0853bb5c17a70313abd646f007cceaa486bbd8724102ffe684c3deaf692aa86815590a447a804c8ab7c2678018c837674f4dcb80081f01cc2014a3981cefc3e33d6df2907cb5ee6b7ed4dc6f9cba7a13998d4a4f1ead58022ab449a0ea417984c452f5a798271bdce672ad7bdc1d8c38e42a896784bff2ed2f33b2a9e498b382f718f42db0785f47cbccf84ee068953a433e1ffe2db953e9cf02dbc20a4f6043b37c2f3e2563f0efe8fa2e258d96836559d17a4005a3467b8628b160672bf4c1c08afd70717e1af14175af845a1072d9dae85cc3832f01c142f7239a74d74ad811f1627b8798a76fdd9d5c2f4f09566a23fff42c10a5bcd895c66e350e50a2a72313e2e903f3648cd08268dacbb99e3d0eca88e3156f919088048c03a8cb4040055f23d28cf1267d6156f3f77ea9d6978a5c0ea8ce3cf57d55fef1fd30ab2b6f55f02c18f73f21327e9f299c88a8cefa26991b447e39ddde25d6ef6130bdd17289552191de143b849768809d8faa8f908aab1f809e70879c8e0e000a9245586f7365e782592ff01a2b62b360767c0c8de37e29d9f6c43e733ebf17b4c596bec0a3c9e7523a30e41d4e8d870f84e5df240160d6927513ace47321c2eb52ee1242a24633c387a1e0f3e9590ffa378b95668c400c99d6356602dc0efbc26db42b624d150ed76c20aef27a875039935cd7d6645045ce0112d45be3f0a835f26ab68f220e494dd2f6628d352b6f06feee081ae302e6af9a15f1149891804e9857f51104d623ab80989c658b0b223556b59bdc012ca53dbbb175d9702e15de5b08e367913472f36c65e815b8282b87230a073442f01336f939a27e225f46e4033bc6d74de1f522fb814d89b47cd6f73e1b62683e51c77294de0ab0486617f9c8380294f994ef8a00eafb4f5ef59e28d2c9bca7bd4ef5efa15aec103edefac0504a6f39ebd60ea69fe53fbd581b1ea47f3faa5"], 0x1004) (async, rerun: 32) syz_emit_vhci(&(0x7f0000001080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdc}, "8738a9f0037abf2e492eb1e9c8f806dcd12357d31dfc44ddc3b02ee6ea15d033c80b01a6df546495a7903a08b52838e7b21f202bd46021625dc85c000509c4e4ee12971f8b5e69bd632f3bfc8a5e073581db517328a3815ea6f1b31d00961a9a6ca8269df6cae95971ca19dbdcd63983cd663115366dc4d64d7a1631757855083a9294e7ddc265d39e7d5b13a5835d9173a5db682f08b3a12ad9168d591d6d50a929d11d58e30708fc27e6b67b752245463cb5b7c174c6d8693aedf9ce0f84dbdc70658514e50e2ced3fe390297d957fd1ed29d6aaf586b83692f348"}, 0xe0) (async) syz_emit_vhci(&(0x7f0000001180)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x45}}, 0x4) 20:25:52 executing program 0: syz_emit_vhci(&(0x7f00000011c0)=ANY=[@ANYRES8], 0x6) syz_emit_vhci(&(0x7f0000001040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1004) syz_emit_vhci(&(0x7f0000001080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdc}, "8738a9f0037abf2e492eb1e9c8f806dcd12357d31dfc44ddc3b02ee6ea15d033c80b01a6df546495a7903a08b52838e7b21f202bd46021625dc85c000509c4e4ee12971f8b5e69bd632f3bfc8a5e073581db517328a3815ea6f1b31d00961a9a6ca8269df6cae95971ca19dbdcd63983cd663115366dc4d64d7a1631757855083a9294e7ddc265d39e7d5b13a5835d9173a5db682f08b3a12ad9168d591d6d50a929d11d58e30708fc27e6b67b752245463cb5b7c174c6d8693aedf9ce0f84dbdc70658514e50e2ced3fe390297d957fd1ed29d6aaf586b83692f348"}, 0xe0) (async) syz_emit_vhci(&(0x7f0000001080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdc}, "8738a9f0037abf2e492eb1e9c8f806dcd12357d31dfc44ddc3b02ee6ea15d033c80b01a6df546495a7903a08b52838e7b21f202bd46021625dc85c000509c4e4ee12971f8b5e69bd632f3bfc8a5e073581db517328a3815ea6f1b31d00961a9a6ca8269df6cae95971ca19dbdcd63983cd663115366dc4d64d7a1631757855083a9294e7ddc265d39e7d5b13a5835d9173a5db682f08b3a12ad9168d591d6d50a929d11d58e30708fc27e6b67b752245463cb5b7c174c6d8693aedf9ce0f84dbdc70658514e50e2ced3fe390297d957fd1ed29d6aaf586b83692f348"}, 0xe0) syz_emit_vhci(&(0x7f0000001180)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x45}}, 0x4) 20:25:52 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x3d00, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b1}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r4, 0x5fec, 0xe79, 0x8, &(0x7f00000000c0)={[0x6d]}, 0x8) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) 20:25:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:52 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:52 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d3ed5632d2b724f1480d9c27aa2b27dabc57265a33f029ce0a065d7355e5a6c946c9fe005e994cb9a2d1ab89f870660c153fbaa23af2c107979d815d8eb328"], 0x6) 20:25:52 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) getsockname$packet(r5, 0x0, 0x0) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x40000, 0xa) io_uring_enter(r5, 0x4b5a, 0xd853, 0x6, 0x0, 0x38) r6 = dup(r0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) syz_io_uring_submit(r1, r8, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x9) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) 20:25:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:52 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d3ed5632d2b724f1480d9c27aa2b27dabc57265a33f029ce0a065d7355e5a6c946c9fe005e994cb9a2d1ab89f870660c153fbaa23af2c107979d815d8eb328"], 0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d3ed5632d2b724f1480d9c27aa2b27dabc57265a33f029ce0a065d7355e5a6c946c9fe005e994cb9a2d1ab89f870660c153fbaa23af2c107979d815d8eb328"], 0x6) (async) 20:25:52 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) getsockname$packet(r5, 0x0, 0x0) (async) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x40000, 0xa) (async) io_uring_enter(r5, 0x4b5a, 0xd853, 0x6, 0x0, 0x38) (async) r6 = dup(r0) (async) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (async) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) syz_io_uring_submit(r1, r8, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x9) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) 20:25:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:52 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d3ed5632d2b724f1480d9c27aa2b27dabc57265a33f029ce0a065d7355e5a6c946c9fe005e994cb9a2d1ab89f870660c153fbaa23af2c107979d815d8eb328"], 0x6) 20:25:52 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) getsockname$packet(r5, 0x0, 0x0) (async) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x40000, 0xa) (async) io_uring_enter(r5, 0x4b5a, 0xd853, 0x6, 0x0, 0x38) (async) r6 = dup(r0) (async) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (async) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) syz_io_uring_submit(r1, r8, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x9) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) 20:25:52 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04d3ad4a8f08634f204c524eb6f409f5bf08c642f900e0990f8fbd952447f61d493d3896dbb7cb3bea8f4c8195ffa49b1de00d70f9bf00d968ca7e6482ae545be045cd3508fd2550744aa83ae7074e9cc766f9c7f0ab597b78f5225968cf91febf834c9d5f1e77a1ab018a2ac947fca859c9e539b426805075a24eec59fae8"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x3, 0x1, [{0xc9, 0x7d0, 0x6}]}}}, 0xc) [ 1521.868927][T12246] Bluetooth: hci0: unexpected event 0x48 length: 9 > 3 [ 1521.868962][T12246] Bluetooth: hci0: wrong event for mode 0 20:25:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:53 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r5, 0x0, 0x0) openat2(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x90000, 0x10, 0x17}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = dup(r0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000240)={{'\x00', 0x1}, {0x36}, 0x0, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="892a61bd10cd72d7b293e7311048f8739a4ce73bfdb5f5a84e9ac48e23bfacefc301405a7bc085a83f28f87143fc16a40b8e50088d6c2550d2600d1a3ae652088d8017a40b61b98b48f18e9bd9dc9ecd5d824ced5c51ea8166aef2a3ee9293587be1fe176aa2e4a817933f08750324171b82a83fe3", 0x75, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x188}) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) 20:25:53 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04d3ad4a8f08634f204c524eb6f409f5bf08c642f900e0990f8fbd952447f61d493d3896dbb7cb3bea8f4c8195ffa49b1de00d70f9bf00d968ca7e6482ae545be045cd3508fd2550744aa83ae7074e9cc766f9c7f0ab597b78f5225968cf91febf834c9d5f1e77a1ab018a2ac947fca859c9e539b426805075a24eec59fae8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x3, 0x1, [{0xc9, 0x7d0, 0x6}]}}}, 0xc) 20:25:53 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:53 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04d3ad4a8f08634f204c524eb6f409f5bf08c642f900e0990f8fbd952447f61d493d3896dbb7cb3bea8f4c8195ffa49b1de00d70f9bf00d968ca7e6482ae545be045cd3508fd2550744aa83ae7074e9cc766f9c7f0ab597b78f5225968cf91febf834c9d5f1e77a1ab018a2ac947fca859c9e539b426805075a24eec59fae8"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x3, 0x1, [{0xc9, 0x7d0, 0x6}]}}}, 0xc) [ 1522.179725][T12246] Bluetooth: hci0: unexpected event 0x48 length: 9 > 3 [ 1522.179759][T12246] Bluetooth: hci0: wrong event for mode 0 20:25:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="2503"], 0x6) [ 1522.297955][T12246] Bluetooth: hci0: unexpected event 0x48 length: 9 > 3 [ 1522.297979][T12246] Bluetooth: hci0: wrong event for mode 0 20:25:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="2503"], 0x6) 20:25:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:53 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="2503"], 0x6) 20:25:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:53 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4401, 0x0) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) [ 1522.786400][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:53 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r5, 0x0, 0x0) (async) openat2(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x90000, 0x10, 0x17}, 0x18) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r6 = dup(r0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000240)={{'\x00', 0x1}, {0x36}, 0x0, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="892a61bd10cd72d7b293e7311048f8739a4ce73bfdb5f5a84e9ac48e23bfacefc301405a7bc085a83f28f87143fc16a40b8e50088d6c2550d2600d1a3ae652088d8017a40b61b98b48f18e9bd9dc9ecd5d824ced5c51ea8166aef2a3ee9293587be1fe176aa2e4a817933f08750324171b82a83fe3", 0x75, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x188}) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) 20:25:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:53 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:53 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4401, 0x0) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4401, 0x0) (async) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) 20:25:53 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4401, 0x0) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4401, 0x0) (async) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) [ 1523.084392][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1523.095859][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1523.158279][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1523.168200][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:54 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mr_integ_alloc\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x6, 0x10001}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0000dd3b4b1cc9c37b6b5533a8c1b3c605000000000000b1317627f9326eaf6a68f3092c8c9c97ac5ba03f01e57b9644fabf3a9a02d1271b8570df4c338ddae11f51581379f7271ce09b35c3b67c4286b53b669d0867a60000005fbb5ace"], 0x6) 20:25:54 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 32) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 32) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r5, 0x0, 0x0) (async) openat2(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x90000, 0x10, 0x17}, 0x18) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = dup(r0) (rerun: 32) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000240)={{'\x00', 0x1}, {0x36}, 0x0, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="892a61bd10cd72d7b293e7311048f8739a4ce73bfdb5f5a84e9ac48e23bfacefc301405a7bc085a83f28f87143fc16a40b8e50088d6c2550d2600d1a3ae652088d8017a40b61b98b48f18e9bd9dc9ecd5d824ced5c51ea8166aef2a3ee9293587be1fe176aa2e4a817933f08750324171b82a83fe3", 0x75, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x188}) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) 20:25:54 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) syz_io_uring_setup(0x3faf, &(0x7f00000003c0)={0x0, 0xd064, 0x2, 0x3, 0x175}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000440)) r6 = syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0xa, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x2208c2, 0x170, 0x8}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r10}}, 0xff) io_uring_enter(r6, 0x2e99, 0xbf4e, 0x3, &(0x7f0000000140)={[0x9]}, 0x8) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) r11 = socket(0x2, 0x3, 0x100000001) bind$inet(r11, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r11, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r11, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) signalfd(r11, &(0x7f00000001c0), 0x8) 20:25:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:54 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) syz_io_uring_setup(0x3faf, &(0x7f00000003c0)={0x0, 0xd064, 0x2, 0x3, 0x175}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000440)) (async) r6 = syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (async) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async, rerun: 64) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r5, r8, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0xa, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x2208c2, 0x170, 0x8}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r10}}, 0xff) io_uring_enter(r6, 0x2e99, 0xbf4e, 0x3, &(0x7f0000000140)={[0x9]}, 0x8) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) r11 = socket(0x2, 0x3, 0x100000001) bind$inet(r11, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) connect$inet(r11, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32) sendto(r11, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r11, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) signalfd(r11, &(0x7f00000001c0), 0x8) 20:25:54 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:54 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) syz_io_uring_setup(0x3faf, &(0x7f00000003c0)={0x0, 0xd064, 0x2, 0x3, 0x175}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000440)) (async) r6 = syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (async) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async, rerun: 64) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0xa, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x2208c2, 0x170, 0x8}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r10}}, 0xff) (async) io_uring_enter(r6, 0x2e99, 0xbf4e, 0x3, &(0x7f0000000140)={[0x9]}, 0x8) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) r11 = socket(0x2, 0x3, 0x100000001) bind$inet(r11, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32) sendto(r11, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (rerun: 32) sendto$inet(r11, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) signalfd(r11, &(0x7f00000001c0), 0x8) 20:25:54 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:54 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r6, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) r8 = syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)=0x0) r11 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r11, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) r12 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r8, 0x10000000) syz_io_uring_submit(r9, r12, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x2f, 0x0, 0x0, 0x0, &(0x7f0000005000/0x1000)=nil, 0x1000, 0x19}, 0x401) syz_io_uring_submit(r4, r10, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2c, 0x2007, @fd_index=0x8, 0xff, 0x0, 0x0, 0x10, 0x0, {0x2}}, 0xffffffc1) r13 = dup(r0) write$6lowpan_enable(r13, &(0x7f0000000000)='0', 0x1) 20:25:55 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mr_integ_alloc\x00', r1}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x6, 0x10001}}, './file0\x00'}) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0000dd3b4b1cc9c37b6b5533a8c1b3c605000000000000b1317627f9326eaf6a68f3092c8c9c97ac5ba03f01e57b9644fabf3a9a02d1271b8570df4c338ddae11f51581379f7271ce09b35c3b67c4286b53b669d0867a60000005fbb5ace"], 0x6) 20:25:55 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async, rerun: 64) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (async) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r6, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async, rerun: 32) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (rerun: 32) r8 = syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)=0x0) (async) r11 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r11, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) r12 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r8, 0x10000000) syz_io_uring_submit(r9, r12, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x2f, 0x0, 0x0, 0x0, &(0x7f0000005000/0x1000)=nil, 0x1000, 0x19}, 0x401) (async, rerun: 64) syz_io_uring_submit(r4, r10, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2c, 0x2007, @fd_index=0x8, 0xff, 0x0, 0x0, 0x10, 0x0, {0x2}}, 0xffffffc1) (async, rerun: 64) r13 = dup(r0) write$6lowpan_enable(r13, &(0x7f0000000000)='0', 0x1) 20:25:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:55 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r1, 0x0, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mr_integ_alloc\x00', r1}, 0x10) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x6, 0x10001}}, './file0\x00'}) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0000dd3b4b1cc9c37b6b5533a8c1b3c605000000000000b1317627f9326eaf6a68f3092c8c9c97ac5ba03f01e57b9644fabf3a9a02d1271b8570df4c338ddae11f51581379f7271ce09b35c3b67c4286b53b669d0867a60000005fbb5ace"], 0x6) 20:25:55 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (rerun: 32) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r6, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (async) r8 = syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)=0x0) (async) r11 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r11, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) r12 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r8, 0x10000000) syz_io_uring_submit(r9, r12, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x2f, 0x0, 0x0, 0x0, &(0x7f0000005000/0x1000)=nil, 0x1000, 0x19}, 0x401) (async, rerun: 64) syz_io_uring_submit(r4, r10, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2c, 0x2007, @fd_index=0x8, 0xff, 0x0, 0x0, 0x10, 0x0, {0x2}}, 0xffffffc1) (async, rerun: 64) r13 = dup(r0) write$6lowpan_enable(r13, &(0x7f0000000000)='0', 0x1) 20:25:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:55 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:55 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000080)=0x3, 0x0, 0x4) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:25:56 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:56 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000080)=0x3, 0x0, 0x4) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000080)=0x3, 0x0, 0x4) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) 20:25:56 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000080)=0x3, 0x0, 0x4) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000080)=0x3, 0x0, 0x4) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) 20:25:56 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:56 executing program 5: r0 = request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='0', 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x2000)=nil, 0x2000, 0x1, 0x13, r2, 0x0) open$dir(&(0x7f00000002c0)='./file0\x00', 0x109100, 0x140) r6 = socket(0x2, 0x3, 0x100000001) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r6, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000300)=[0x85eb], 0x1, 0x80800}) r7 = socket(0x2, 0x3, 0x100000001) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r7, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r8 = socket(0x2, 0x3, 0x100000001) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r8, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) syz_io_uring_submit(r5, r4, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000440)={r9, r10+10000000}, 0x1, 0x1, 0x1}, 0x80000000) r11 = dup(r1) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0x1) 20:25:56 executing program 0: r0 = io_uring_setup(0x33de, &(0x7f0000000000)={0x0, 0x2206, 0x8, 0x1, 0x37}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x3, 0xc, 0x0, {0x0, 0x0, r0}}, 0xffff) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"97ee8cc65687bc3c700e38d5e08b254e", 0x0, 0x0, {0x7ab, 0x9}, {0xdd5, 0x20}, 0xffff, [0x2, 0xfffffffffffffff7, 0x4, 0x7, 0x5, 0x0, 0x3, 0xdc, 0x0, 0x800000000000000, 0x3, 0x1, 0x8, 0x1, 0x6, 0x6]}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) 20:25:56 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:56 executing program 5: r0 = request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='0', 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x2000)=nil, 0x2000, 0x1, 0x13, r2, 0x0) (async) open$dir(&(0x7f00000002c0)='./file0\x00', 0x109100, 0x140) r6 = socket(0x2, 0x3, 0x100000001) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r6, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r6, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000300)=[0x85eb], 0x1, 0x80800}) r7 = socket(0x2, 0x3, 0x100000001) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r7, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r7, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r8 = socket(0x2, 0x3, 0x100000001) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r8, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r8, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) syz_io_uring_submit(r5, r4, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000440)={r9, r10+10000000}, 0x1, 0x1, 0x1}, 0x80000000) (async) r11 = dup(r1) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0x1) 20:25:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:56 executing program 5: r0 = request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='0', 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x2000)=nil, 0x2000, 0x1, 0x13, r2, 0x0) (rerun: 64) open$dir(&(0x7f00000002c0)='./file0\x00', 0x109100, 0x140) (async) r6 = socket(0x2, 0x3, 0x100000001) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) sendto(r6, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async, rerun: 64) sendto$inet(r6, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000300)=[0x85eb], 0x1, 0x80800}) (async, rerun: 32) r7 = socket(0x2, 0x3, 0x100000001) (rerun: 32) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r7, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r7, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) r8 = socket(0x2, 0x3, 0x100000001) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r8, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async, rerun: 32) sendto$inet(r8, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) syz_io_uring_submit(r5, r4, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000440)={r9, r10+10000000}, 0x1, 0x1, 0x1}, 0x80000000) (async) r11 = dup(r1) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0x1) [ 1526.116238][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:57 executing program 0: r0 = io_uring_setup(0x33de, &(0x7f0000000000)={0x0, 0x2206, 0x8, 0x1, 0x37}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x3, 0xc, 0x0, {0x0, 0x0, r0}}, 0xffff) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"97ee8cc65687bc3c700e38d5e08b254e", 0x0, 0x0, {0x7ab, 0x9}, {0xdd5, 0x20}, 0xffff, [0x2, 0xfffffffffffffff7, 0x4, 0x7, 0x5, 0x0, 0x3, 0xdc, 0x0, 0x800000000000000, 0x3, 0x1, 0x8, 0x1, 0x6, 0x6]}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) 20:25:57 executing program 0: r0 = io_uring_setup(0x33de, &(0x7f0000000000)={0x0, 0x2206, 0x8, 0x1, 0x37}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x3, 0xc, 0x0, {0x0, 0x0, r0}}, 0xffff) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"97ee8cc65687bc3c700e38d5e08b254e", 0x0, 0x0, {0x7ab, 0x9}, {0xdd5, 0x20}, 0xffff, [0x2, 0xfffffffffffffff7, 0x4, 0x7, 0x5, 0x0, 0x3, 0xdc, 0x0, 0x800000000000000, 0x3, 0x1, 0x8, 0x1, 0x6, 0x6]}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) io_uring_setup(0x33de, &(0x7f0000000000)={0x0, 0x2206, 0x8, 0x1, 0x37}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x3, 0xc, 0x0, {0x0, 0x0, r0}}, 0xffff) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"97ee8cc65687bc3c700e38d5e08b254e", 0x0, 0x0, {0x7ab, 0x9}, {0xdd5, 0x20}, 0xffff, [0x2, 0xfffffffffffffff7, 0x4, 0x7, 0x5, 0x0, 0x3, 0xdc, 0x0, 0x800000000000000, 0x3, 0x1, 0x8, 0x1, 0x6, 0x6]}) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) [ 1526.320789][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:57 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r5, 0x0, 0x0) fsmount(r5, 0x0, 0x83) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) [ 1526.444053][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:57 executing program 0: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18140004}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040800}, 0x4044800) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES16], 0x6) 20:25:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:57 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r5, 0x0, 0x0) fsmount(r5, 0x0, 0x83) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r4) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r5, 0x0, 0x0) (async) fsmount(r5, 0x0, 0x83) (async) dup(r0) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) (async) 20:25:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:57 executing program 0: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18140004}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040800}, 0x4044800) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES16], 0x6) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18140004}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040800}, 0x4044800) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES16], 0x6) (async) 20:25:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:57 executing program 0: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18140004}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040800}, 0x4044800) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES16], 0x6) 20:25:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:57 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xde}, "8972bf2f7b62f898816d851a3458710f3219c3b2b37f192e092f5777fbb670fa050d2b4b0b5442604a9528ce765270f107a78d05dcc5561f075ecc3f06f33430150ee67e6584fb6f4045515524e61ce178045fedb84f2cdd5281370fab9e7c9c11808949a086ba0fa4c01d0098d5eadff620062dc41e27bae4fa605615c8377bcc3adba5bee364bc38f78038571bbab8e96174db6f310ed9be9a551abfec514d078bcbbbd13ac587f5adb8e7501c3fa9fc672d756ecd7affe7b047fd9f52c17a2c92ea0bc303dfe143b8b2e2a4fd2a307f1c8afeae3b69efb72bfdf98683"}, 0xe2) 20:25:57 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r5, 0x0, 0x0) fsmount(r5, 0x0, 0x83) (async) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) 20:25:57 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r3 = syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r6, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r10}}, 0x4) syz_io_uring_submit(r2, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r10}}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r11 = dup(r0) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0x1) 20:25:57 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xde}, "8972bf2f7b62f898816d851a3458710f3219c3b2b37f192e092f5777fbb670fa050d2b4b0b5442604a9528ce765270f107a78d05dcc5561f075ecc3f06f33430150ee67e6584fb6f4045515524e61ce178045fedb84f2cdd5281370fab9e7c9c11808949a086ba0fa4c01d0098d5eadff620062dc41e27bae4fa605615c8377bcc3adba5bee364bc38f78038571bbab8e96174db6f310ed9be9a551abfec514d078bcbbbd13ac587f5adb8e7501c3fa9fc672d756ecd7affe7b047fd9f52c17a2c92ea0bc303dfe143b8b2e2a4fd2a307f1c8afeae3b69efb72bfdf98683"}, 0xe2) [ 1526.998970][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:58 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xde}, "8972bf2f7b62f898816d851a3458710f3219c3b2b37f192e092f5777fbb670fa050d2b4b0b5442604a9528ce765270f107a78d05dcc5561f075ecc3f06f33430150ee67e6584fb6f4045515524e61ce178045fedb84f2cdd5281370fab9e7c9c11808949a086ba0fa4c01d0098d5eadff620062dc41e27bae4fa605615c8377bcc3adba5bee364bc38f78038571bbab8e96174db6f310ed9be9a551abfec514d078bcbbbd13ac587f5adb8e7501c3fa9fc672d756ecd7affe7b047fd9f52c17a2c92ea0bc303dfe143b8b2e2a4fd2a307f1c8afeae3b69efb72bfdf98683"}, 0xe2) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xde}, "8972bf2f7b62f898816d851a3458710f3219c3b2b37f192e092f5777fbb670fa050d2b4b0b5442604a9528ce765270f107a78d05dcc5561f075ecc3f06f33430150ee67e6584fb6f4045515524e61ce178045fedb84f2cdd5281370fab9e7c9c11808949a086ba0fa4c01d0098d5eadff620062dc41e27bae4fa605615c8377bcc3adba5bee364bc38f78038571bbab8e96174db6f310ed9be9a551abfec514d078bcbbbd13ac587f5adb8e7501c3fa9fc672d756ecd7affe7b047fd9f52c17a2c92ea0bc303dfe143b8b2e2a4fd2a307f1c8afeae3b69efb72bfdf98683"}, 0xe2) (async) [ 1527.153572][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1527.183246][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1527.248531][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1527.255730][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:58 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x0], 0x5) 20:25:58 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r3 = syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r6, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) (async) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r10}}, 0x4) (async) syz_io_uring_submit(r2, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r10}}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r11 = dup(r0) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0x1) 20:25:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:58 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x0], 0x5) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x0], 0x5) (async) 20:25:58 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:58 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:58 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x0], 0x5) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x0], 0x5) (async) 20:25:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:58 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r3 = syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (async) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async, rerun: 32) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r6, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async, rerun: 64) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) (async, rerun: 64) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r10}}, 0x4) (async) syz_io_uring_submit(r2, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r10}}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r11 = dup(r0) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0x1) 20:25:58 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) 20:25:58 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) 20:25:58 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) [ 1528.057700][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:59 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:25:59 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x9000, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0xfa0f, 0x0, 0x0, 0x194, 0x0, r1}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) dup(0xffffffffffffffff) [ 1528.221279][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1528.255824][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:59 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:25:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) (async) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) 20:25:59 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x9000, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0xfa0f, 0x0, 0x0, 0x194, 0x0, r1}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) dup(0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x9000, 0x0) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0xfa0f, 0x0, 0x0, 0x194, 0x0, r1}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) (async) dup(0xffffffffffffffff) (async) 20:25:59 executing program 0: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2200, 0x42) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, ':'}, {0x20, '/],'}, {0x20, '%{&($--\xd5%#+$'}], 0xa, "674dadff"}, 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="4507f46bf517531d527f711233d1790deb03"], 0x6) 20:25:59 executing program 0: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2200, 0x42) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, ':'}, {0x20, '/],'}, {0x20, '%{&($--\xd5%#+$'}], 0xa, "674dadff"}, 0x22) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="4507f46bf517531d527f711233d1790deb03"], 0x6) [ 1528.705498][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:25:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 20:25:59 executing program 0: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2200, 0x42) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, ':'}, {0x20, '/],'}, {0x20, '%{&($--\xd5%#+$'}], 0xa, "674dadff"}, 0x22) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="4507f46bf517531d527f711233d1790deb03"], 0x6) 20:25:59 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x9000, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0xfa0f, 0x0, 0x0, 0x194, 0x0, r1}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) dup(0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x9000, 0x0) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0xfa0f, 0x0, 0x0, 0x194, 0x0, r1}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) (async) dup(0xffffffffffffffff) (async) 20:25:59 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_io_uring_setup(0x5d8, &(0x7f00000000c0)={0x0, 0x9000000, 0x20, 0x2, 0x51}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000600)="00c54a4735514d6466d0a738df2831a5d11add6ffef541feb19eb86fea00004481805ffebb27294b2b9c1358cdf671c584496086cd1f0d5bd4e30a4d1374ca383a3f64322341be1598a4f60a1914678d3b86112e2c31be67d286dd952438bc57463ecb0cb8d7a4252553b837670ba2e14e9f4dc256507e280992461d403e0ffa2648ff290cf06eb13b099a85b38d0348a0815e8ecc075e1fdb51de30ae43a6a2e425281deb77db2c56efc389a3e03a67ececa3cd8bae9653352de3f465832169867e23f800000000", 0xb9, 0x8002, 0x0, 0x5a) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r5, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000480), &(0x7f00000004c0)=0xc) sendmsg$unix(r3, &(0x7f0000000400)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="dc7f84df9414383614f2093a2ba76b829e1e780a7a369795", 0x18}, {&(0x7f0000000280)="37f7bf6a0023b45c5e713c", 0xb}, {&(0x7f00000002c0)="f30ed5f63a74768641a28f163cb90911346ba908a3ed0087bb6b2ce946c08f74679fc2a2c9e3e04dae302e67f0165f228c4f359831cf8ea8c86670d5a4ccf2b90384c43e3f75ed6c2e1ba4f717411926ec5c91c7bd4bcec3458a10926440c0f662ebac8f780e2cfb9fd56bac2d50d8e787decc15fcbd8b8521ddeca7c03b48b7a526c93cd5e17a9e437fbe830e9b27630f260361c08afe8c2fd8147dc1196a7368e5667b6a106183355e136c7fbd8f750ecac27aa5075b24d67606759e0c9d7a8fd0b43b0e31616ed34adbd4779ffc219ddae1c1b4937c675f2aa6c35fd420205d", 0xe1}], 0x3, 0x0, 0x0, 0x4000000}, 0x4000000) lseek(r3, 0xc03, 0x3) 20:25:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:00 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "0142f5d7c9ff10cf8d2a15f7fdb766edc635f01903dd75020844a1be66d149f667742cfd15c5431a4db4ace43abd15a7e7fc33a33e6d49938970fcbf3176bf7ad8524fd33ccea85fee970e68fd"}, 0x51) 20:26:00 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) [ 1529.215975][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:00 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_io_uring_setup(0x5d8, &(0x7f00000000c0)={0x0, 0x9000000, 0x20, 0x2, 0x51}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) (async) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32) r4 = socket(0x2, 0x3, 0x100000001) (rerun: 32) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (rerun: 64) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000600)="00c54a4735514d6466d0a738df2831a5d11add6ffef541feb19eb86fea00004481805ffebb27294b2b9c1358cdf671c584496086cd1f0d5bd4e30a4d1374ca383a3f64322341be1598a4f60a1914678d3b86112e2c31be67d286dd952438bc57463ecb0cb8d7a4252553b837670ba2e14e9f4dc256507e280992461d403e0ffa2648ff290cf06eb13b099a85b38d0348a0815e8ecc075e1fdb51de30ae43a6a2e425281deb77db2c56efc389a3e03a67ececa3cd8bae9653352de3f465832169867e23f800000000", 0xb9, 0x8002, 0x0, 0x5a) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r5, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000480), &(0x7f00000004c0)=0xc) (async) sendmsg$unix(r3, &(0x7f0000000400)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="dc7f84df9414383614f2093a2ba76b829e1e780a7a369795", 0x18}, {&(0x7f0000000280)="37f7bf6a0023b45c5e713c", 0xb}, {&(0x7f00000002c0)="f30ed5f63a74768641a28f163cb90911346ba908a3ed0087bb6b2ce946c08f74679fc2a2c9e3e04dae302e67f0165f228c4f359831cf8ea8c86670d5a4ccf2b90384c43e3f75ed6c2e1ba4f717411926ec5c91c7bd4bcec3458a10926440c0f662ebac8f780e2cfb9fd56bac2d50d8e787decc15fcbd8b8521ddeca7c03b48b7a526c93cd5e17a9e437fbe830e9b27630f260361c08afe8c2fd8147dc1196a7368e5667b6a106183355e136c7fbd8f750ecac27aa5075b24d67606759e0c9d7a8fd0b43b0e31616ed34adbd4779ffc219ddae1c1b4937c675f2aa6c35fd420205d", 0xe1}], 0x3, 0x0, 0x0, 0x4000000}, 0x4000000) lseek(r3, 0xc03, 0x3) 20:26:00 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "0142f5d7c9ff10cf8d2a15f7fdb766edc635f01903dd75020844a1be66d149f667742cfd15c5431a4db4ace43abd15a7e7fc33a33e6d49938970fcbf3176bf7ad8524fd33ccea85fee970e68fd"}, 0x51) 20:26:00 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:00 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "0142f5d7c9ff10cf8d2a15f7fdb766edc635f01903dd75020844a1be66d149f667742cfd15c5431a4db4ace43abd15a7e7fc33a33e6d49938970fcbf3176bf7ad8524fd33ccea85fee970e68fd"}, 0x51) 20:26:00 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) [ 1529.651611][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:00 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = syz_io_uring_setup(0x5d8, &(0x7f00000000c0)={0x0, 0x9000000, 0x20, 0x2, 0x51}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) (async) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) sendto(r4, &(0x7f0000000600)="00c54a4735514d6466d0a738df2831a5d11add6ffef541feb19eb86fea00004481805ffebb27294b2b9c1358cdf671c584496086cd1f0d5bd4e30a4d1374ca383a3f64322341be1598a4f60a1914678d3b86112e2c31be67d286dd952438bc57463ecb0cb8d7a4252553b837670ba2e14e9f4dc256507e280992461d403e0ffa2648ff290cf06eb13b099a85b38d0348a0815e8ecc075e1fdb51de30ae43a6a2e425281deb77db2c56efc389a3e03a67ececa3cd8bae9653352de3f465832169867e23f800000000", 0xb9, 0x8002, 0x0, 0x5a) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r5, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000480), &(0x7f00000004c0)=0xc) sendmsg$unix(r3, &(0x7f0000000400)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="dc7f84df9414383614f2093a2ba76b829e1e780a7a369795", 0x18}, {&(0x7f0000000280)="37f7bf6a0023b45c5e713c", 0xb}, {&(0x7f00000002c0)="f30ed5f63a74768641a28f163cb90911346ba908a3ed0087bb6b2ce946c08f74679fc2a2c9e3e04dae302e67f0165f228c4f359831cf8ea8c86670d5a4ccf2b90384c43e3f75ed6c2e1ba4f717411926ec5c91c7bd4bcec3458a10926440c0f662ebac8f780e2cfb9fd56bac2d50d8e787decc15fcbd8b8521ddeca7c03b48b7a526c93cd5e17a9e437fbe830e9b27630f260361c08afe8c2fd8147dc1196a7368e5667b6a106183355e136c7fbd8f750ecac27aa5075b24d67606759e0c9d7a8fd0b43b0e31616ed34adbd4779ffc219ddae1c1b4937c675f2aa6c35fd420205d", 0xe1}], 0x3, 0x0, 0x0, 0x4000000}, 0x4000000) (async) lseek(r3, 0xc03, 0x3) 20:26:00 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0403", @ANYRESDEC, @ANYRES8=r0], 0x6) [ 1529.777241][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:00 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0403", @ANYRESDEC, @ANYRES8=r0], 0x6) socket(0x2, 0x3, 0x100000001) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0403", @ANYRESDEC, @ANYRES8=r0], 0x6) (async) [ 1529.865355][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:00 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:00 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) [ 1530.102711][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.136830][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:01 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) dup(r0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:01 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0403", @ANYRESDEC, @ANYRES8=r0], 0x6) (rerun: 32) 20:26:01 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) [ 1530.386365][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.393812][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.401653][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.438826][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.445937][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.453100][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.460379][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.467436][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.484564][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.507204][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.514713][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.521979][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.529073][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.536807][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.543928][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.550940][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.557946][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.565159][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.572191][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.579252][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.586227][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.593257][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.601186][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.608194][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.615247][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.622260][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.629319][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:01 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:01 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) 20:26:01 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) [ 1530.636315][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.643948][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.651002][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.657986][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.665071][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1530.672088][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:01 executing program 5: prctl$PR_GET_FP_MODE(0x2e) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@xdp={0x2c, 0x5, r8, 0x39}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="59e8250765005561b027ae129c468067a5d42cabce39372c83ea25173e9f2414dda84fe02a7952b13652e2d16679367d1e0213519e170b0c9745ab98e2e6b3c72bb6b57217ab", 0x46}, {&(0x7f00000003c0)="9766db13a92ef6d6a299c85428efa02f8aff72888b0ce5cb16dc870698730cd4ecb9a424a52c3100146bf6264a362c3ae5969cf768fc1a38b8c8b67b7e41263a1623044dc2455d4ac5ad325a2a0bc395c2a94c8d1fa4b82df99a9a6eb7ab3808c197261134f2e667e329f301648b33f73ae9a977f1a5b39f59987eb39ff41f24b492e4c4c291a5189e4f4ec18de683380913ecc299f820b04af6b69df522bed9a5a8f1e5355474df968f9dee3f18962cb3e263", 0xb3}], 0x2}, 0x0, 0x6000c800, 0x0, {0x0, r9}}, 0x4) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:01 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)="519a461a9e6283617b3e453b1e3389c69693ec76068f05924dedbd63b09424db445dc7b8d02cedbd453b2c11fe5a8a153ce47dce4922bca7dafe1e2161873204a060cedcdbf159c766d2b4957b46771084c69af4ad234b04a62e87efcb44eea3ad40841c1d0217ffc206cae83a6edc1ec84013657dd4afdf6824eff1a836e099dd94c55deabba5f1917257e12b00fdac3fe54e8499b74ad863910d9060a002ee59ef282f67f2370c45bdcfdf07c0f10f62092fae82481b669d4b9252605aa96fd0706b33", 0xc4, 0x40001, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{&(0x7f0000000300)=@can, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/225, 0xe1}], 0x3, &(0x7f0000000680)=""/103, 0x67}, 0x9}, {{&(0x7f0000000700)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000840)=""/208, 0xd0}, {&(0x7f0000000940)=""/144, 0x90}, {&(0x7f0000000a00)=""/201, 0xc9}, {&(0x7f0000000b00)=""/2, 0x2}, {&(0x7f0000000b40)=""/139, 0x8b}], 0x6, &(0x7f0000000c80)=""/207, 0xcf}, 0x4}, {{&(0x7f0000000d80)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000e00)=""/151, 0x97}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000001f00)=""/27, 0x1b}, 0x8}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1, &(0x7f0000002100)=""/2, 0x2}, 0xd3}, {{&(0x7f0000002140)=@ax25={{}, [@rose, @null, @remote, @bcast, @default, @bcast, @bcast, @netrom]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000021c0)=""/57, 0x39}, {&(0x7f0000002200)=""/212, 0xd4}, {&(0x7f0000002300)=""/11, 0xb}, {&(0x7f0000002340)=""/234, 0xea}, {&(0x7f0000002440)=""/51, 0x33}, {&(0x7f0000002480)=""/23, 0x17}, {&(0x7f00000024c0)=""/129, 0x81}, {&(0x7f0000002580)=""/26, 0x1a}, {&(0x7f00000025c0)=""/58, 0x3a}], 0x9, &(0x7f00000026c0)=""/68, 0x44}, 0x7}, {{&(0x7f0000002740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000027c0)=""/137, 0x89}, {&(0x7f0000002880)=""/25, 0x19}, {&(0x7f00000028c0)=""/176, 0xb0}, {&(0x7f0000002980)=""/74, 0x4a}], 0x4, &(0x7f0000002a40)=""/188, 0xbc}, 0x3f}, {{&(0x7f0000002b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000002b80)=""/68, 0x44}, {&(0x7f0000002c00)=""/58, 0x3a}, {&(0x7f0000002c40)=""/93, 0x5d}, {&(0x7f0000002cc0)=""/96, 0x60}, {&(0x7f0000002d40)=""/82, 0x52}, {&(0x7f0000002dc0)=""/187, 0xbb}, {&(0x7f0000002e80)=""/147, 0x93}, {&(0x7f0000002f40)=""/191, 0xbf}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x9, &(0x7f00000040c0)=""/38, 0x26}, 0x8}, {{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/119, 0x77}, {&(0x7f0000005180)=""/57, 0x39}, {&(0x7f00000051c0)=""/107, 0x6b}, {&(0x7f0000005240)=""/51, 0x33}], 0x5, &(0x7f0000005300)=""/248, 0xf8}, 0x9556}, {{&(0x7f0000005400)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/54, 0x36}, {&(0x7f00000054c0)=""/169, 0xa9}], 0x2, &(0x7f00000055c0)=""/140, 0x8c}}, {{&(0x7f0000005680)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000006800)=[{&(0x7f0000005700)=""/60, 0x3c}, {&(0x7f0000005740)=""/181, 0xb5}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x3, &(0x7f0000006840)=""/71, 0x47}}], 0xa, 0x40000000, &(0x7f0000006b40)={0x77359400}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0xfffffffffffffffa) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@private=0xa010100, @multicast2}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xd2, 0x2}, {0x1}}}}, 0xf) 20:26:01 executing program 5: prctl$PR_GET_FP_MODE(0x2e) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = dup(r0) (async, rerun: 32) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) (async, rerun: 32) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@xdp={0x2c, 0x5, r8, 0x39}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="59e8250765005561b027ae129c468067a5d42cabce39372c83ea25173e9f2414dda84fe02a7952b13652e2d16679367d1e0213519e170b0c9745ab98e2e6b3c72bb6b57217ab", 0x46}, {&(0x7f00000003c0)="9766db13a92ef6d6a299c85428efa02f8aff72888b0ce5cb16dc870698730cd4ecb9a424a52c3100146bf6264a362c3ae5969cf768fc1a38b8c8b67b7e41263a1623044dc2455d4ac5ad325a2a0bc395c2a94c8d1fa4b82df99a9a6eb7ab3808c197261134f2e667e329f301648b33f73ae9a977f1a5b39f59987eb39ff41f24b492e4c4c291a5189e4f4ec18de683380913ecc299f820b04af6b69df522bed9a5a8f1e5355474df968f9dee3f18962cb3e263", 0xb3}], 0x2}, 0x0, 0x6000c800, 0x0, {0x0, r9}}, 0x4) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) [ 1530.984480][ T5017] Bluetooth: Unexpected continuation frame (len 10) 20:26:01 executing program 5: prctl$PR_GET_FP_MODE(0x2e) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) (async) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (async) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@xdp={0x2c, 0x5, r8, 0x39}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="59e8250765005561b027ae129c468067a5d42cabce39372c83ea25173e9f2414dda84fe02a7952b13652e2d16679367d1e0213519e170b0c9745ab98e2e6b3c72bb6b57217ab", 0x46}, {&(0x7f00000003c0)="9766db13a92ef6d6a299c85428efa02f8aff72888b0ce5cb16dc870698730cd4ecb9a424a52c3100146bf6264a362c3ae5969cf768fc1a38b8c8b67b7e41263a1623044dc2455d4ac5ad325a2a0bc395c2a94c8d1fa4b82df99a9a6eb7ab3808c197261134f2e667e329f301648b33f73ae9a977f1a5b39f59987eb39ff41f24b492e4c4c291a5189e4f4ec18de683380913ecc299f820b04af6b69df522bed9a5a8f1e5355474df968f9dee3f18962cb3e263", 0xb3}], 0x2}, 0x0, 0x6000c800, 0x0, {0x0, r9}}, 0x4) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:02 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:02 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:02 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:02 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) 20:26:02 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:02 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2271, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0xffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r6, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0x1) 20:26:02 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000180)="519a461a9e6283617b3e453b1e3389c69693ec76068f05924dedbd63b09424db445dc7b8d02cedbd453b2c11fe5a8a153ce47dce4922bca7dafe1e2161873204a060cedcdbf159c766d2b4957b46771084c69af4ad234b04a62e87efcb44eea3ad40841c1d0217ffc206cae83a6edc1ec84013657dd4afdf6824eff1a836e099dd94c55deabba5f1917257e12b00fdac3fe54e8499b74ad863910d9060a002ee59ef282f67f2370c45bdcfdf07c0f10f62092fae82481b669d4b9252605aa96fd0706b33", 0xc4, 0x40001, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000068c0)=[{{&(0x7f0000000300)=@can, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/225, 0xe1}], 0x3, &(0x7f0000000680)=""/103, 0x67}, 0x9}, {{&(0x7f0000000700)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000840)=""/208, 0xd0}, {&(0x7f0000000940)=""/144, 0x90}, {&(0x7f0000000a00)=""/201, 0xc9}, {&(0x7f0000000b00)=""/2, 0x2}, {&(0x7f0000000b40)=""/139, 0x8b}], 0x6, &(0x7f0000000c80)=""/207, 0xcf}, 0x4}, {{&(0x7f0000000d80)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000e00)=""/151, 0x97}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000001f00)=""/27, 0x1b}, 0x8}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1, &(0x7f0000002100)=""/2, 0x2}, 0xd3}, {{&(0x7f0000002140)=@ax25={{}, [@rose, @null, @remote, @bcast, @default, @bcast, @bcast, @netrom]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000021c0)=""/57, 0x39}, {&(0x7f0000002200)=""/212, 0xd4}, {&(0x7f0000002300)=""/11, 0xb}, {&(0x7f0000002340)=""/234, 0xea}, {&(0x7f0000002440)=""/51, 0x33}, {&(0x7f0000002480)=""/23, 0x17}, {&(0x7f00000024c0)=""/129, 0x81}, {&(0x7f0000002580)=""/26, 0x1a}, {&(0x7f00000025c0)=""/58, 0x3a}], 0x9, &(0x7f00000026c0)=""/68, 0x44}, 0x7}, {{&(0x7f0000002740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000027c0)=""/137, 0x89}, {&(0x7f0000002880)=""/25, 0x19}, {&(0x7f00000028c0)=""/176, 0xb0}, {&(0x7f0000002980)=""/74, 0x4a}], 0x4, &(0x7f0000002a40)=""/188, 0xbc}, 0x3f}, {{&(0x7f0000002b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000002b80)=""/68, 0x44}, {&(0x7f0000002c00)=""/58, 0x3a}, {&(0x7f0000002c40)=""/93, 0x5d}, {&(0x7f0000002cc0)=""/96, 0x60}, {&(0x7f0000002d40)=""/82, 0x52}, {&(0x7f0000002dc0)=""/187, 0xbb}, {&(0x7f0000002e80)=""/147, 0x93}, {&(0x7f0000002f40)=""/191, 0xbf}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x9, &(0x7f00000040c0)=""/38, 0x26}, 0x8}, {{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/119, 0x77}, {&(0x7f0000005180)=""/57, 0x39}, {&(0x7f00000051c0)=""/107, 0x6b}, {&(0x7f0000005240)=""/51, 0x33}], 0x5, &(0x7f0000005300)=""/248, 0xf8}, 0x9556}, {{&(0x7f0000005400)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/54, 0x36}, {&(0x7f00000054c0)=""/169, 0xa9}], 0x2, &(0x7f00000055c0)=""/140, 0x8c}}, {{&(0x7f0000005680)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000006800)=[{&(0x7f0000005700)=""/60, 0x3c}, {&(0x7f0000005740)=""/181, 0xb5}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x3, &(0x7f0000006840)=""/71, 0x47}}], 0xa, 0x40000000, &(0x7f0000006b40)={0x77359400}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0xfffffffffffffffa) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@private=0xa010100, @multicast2}, 0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xd2, 0x2}, {0x1}}}}, 0xf) 20:26:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) [ 1531.844576][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 1531.844592][ T26] audit: type=1400 audit(1682454362.696:445): avc: denied { read } for pid=14030 comm="syz-executor.5" name="sg0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 20:26:02 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:02 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)="519a461a9e6283617b3e453b1e3389c69693ec76068f05924dedbd63b09424db445dc7b8d02cedbd453b2c11fe5a8a153ce47dce4922bca7dafe1e2161873204a060cedcdbf159c766d2b4957b46771084c69af4ad234b04a62e87efcb44eea3ad40841c1d0217ffc206cae83a6edc1ec84013657dd4afdf6824eff1a836e099dd94c55deabba5f1917257e12b00fdac3fe54e8499b74ad863910d9060a002ee59ef282f67f2370c45bdcfdf07c0f10f62092fae82481b669d4b9252605aa96fd0706b33", 0xc4, 0x40001, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{&(0x7f0000000300)=@can, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/225, 0xe1}], 0x3, &(0x7f0000000680)=""/103, 0x67}, 0x9}, {{&(0x7f0000000700)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000840)=""/208, 0xd0}, {&(0x7f0000000940)=""/144, 0x90}, {&(0x7f0000000a00)=""/201, 0xc9}, {&(0x7f0000000b00)=""/2, 0x2}, {&(0x7f0000000b40)=""/139, 0x8b}], 0x6, &(0x7f0000000c80)=""/207, 0xcf}, 0x4}, {{&(0x7f0000000d80)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000e00)=""/151, 0x97}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000001f00)=""/27, 0x1b}, 0x8}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1, &(0x7f0000002100)=""/2, 0x2}, 0xd3}, {{&(0x7f0000002140)=@ax25={{}, [@rose, @null, @remote, @bcast, @default, @bcast, @bcast, @netrom]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000021c0)=""/57, 0x39}, {&(0x7f0000002200)=""/212, 0xd4}, {&(0x7f0000002300)=""/11, 0xb}, {&(0x7f0000002340)=""/234, 0xea}, {&(0x7f0000002440)=""/51, 0x33}, {&(0x7f0000002480)=""/23, 0x17}, {&(0x7f00000024c0)=""/129, 0x81}, {&(0x7f0000002580)=""/26, 0x1a}, {&(0x7f00000025c0)=""/58, 0x3a}], 0x9, &(0x7f00000026c0)=""/68, 0x44}, 0x7}, {{&(0x7f0000002740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000027c0)=""/137, 0x89}, {&(0x7f0000002880)=""/25, 0x19}, {&(0x7f00000028c0)=""/176, 0xb0}, {&(0x7f0000002980)=""/74, 0x4a}], 0x4, &(0x7f0000002a40)=""/188, 0xbc}, 0x3f}, {{&(0x7f0000002b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000002b80)=""/68, 0x44}, {&(0x7f0000002c00)=""/58, 0x3a}, {&(0x7f0000002c40)=""/93, 0x5d}, {&(0x7f0000002cc0)=""/96, 0x60}, {&(0x7f0000002d40)=""/82, 0x52}, {&(0x7f0000002dc0)=""/187, 0xbb}, {&(0x7f0000002e80)=""/147, 0x93}, {&(0x7f0000002f40)=""/191, 0xbf}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x9, &(0x7f00000040c0)=""/38, 0x26}, 0x8}, {{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/119, 0x77}, {&(0x7f0000005180)=""/57, 0x39}, {&(0x7f00000051c0)=""/107, 0x6b}, {&(0x7f0000005240)=""/51, 0x33}], 0x5, &(0x7f0000005300)=""/248, 0xf8}, 0x9556}, {{&(0x7f0000005400)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/54, 0x36}, {&(0x7f00000054c0)=""/169, 0xa9}], 0x2, &(0x7f00000055c0)=""/140, 0x8c}}, {{&(0x7f0000005680)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000006800)=[{&(0x7f0000005700)=""/60, 0x3c}, {&(0x7f0000005740)=""/181, 0xb5}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x3, &(0x7f0000006840)=""/71, 0x47}}], 0xa, 0x40000000, &(0x7f0000006b40)={0x77359400}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0xfffffffffffffffa) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@private=0xa010100, @multicast2}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xd2, 0x2}, {0x1}}}}, 0xf) socket(0x2, 0x3, 0x100000001) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000180)="519a461a9e6283617b3e453b1e3389c69693ec76068f05924dedbd63b09424db445dc7b8d02cedbd453b2c11fe5a8a153ce47dce4922bca7dafe1e2161873204a060cedcdbf159c766d2b4957b46771084c69af4ad234b04a62e87efcb44eea3ad40841c1d0217ffc206cae83a6edc1ec84013657dd4afdf6824eff1a836e099dd94c55deabba5f1917257e12b00fdac3fe54e8499b74ad863910d9060a002ee59ef282f67f2370c45bdcfdf07c0f10f62092fae82481b669d4b9252605aa96fd0706b33", 0xc4, 0x40001, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000068c0)=[{{&(0x7f0000000300)=@can, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/225, 0xe1}], 0x3, &(0x7f0000000680)=""/103, 0x67}, 0x9}, {{&(0x7f0000000700)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000840)=""/208, 0xd0}, {&(0x7f0000000940)=""/144, 0x90}, {&(0x7f0000000a00)=""/201, 0xc9}, {&(0x7f0000000b00)=""/2, 0x2}, {&(0x7f0000000b40)=""/139, 0x8b}], 0x6, &(0x7f0000000c80)=""/207, 0xcf}, 0x4}, {{&(0x7f0000000d80)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000e00)=""/151, 0x97}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000001f00)=""/27, 0x1b}, 0x8}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1, &(0x7f0000002100)=""/2, 0x2}, 0xd3}, {{&(0x7f0000002140)=@ax25={{}, [@rose, @null, @remote, @bcast, @default, @bcast, @bcast, @netrom]}, 0x80, &(0x7f0000002600)=[{&(0x7f00000021c0)=""/57, 0x39}, {&(0x7f0000002200)=""/212, 0xd4}, {&(0x7f0000002300)=""/11, 0xb}, {&(0x7f0000002340)=""/234, 0xea}, {&(0x7f0000002440)=""/51, 0x33}, {&(0x7f0000002480)=""/23, 0x17}, {&(0x7f00000024c0)=""/129, 0x81}, {&(0x7f0000002580)=""/26, 0x1a}, {&(0x7f00000025c0)=""/58, 0x3a}], 0x9, &(0x7f00000026c0)=""/68, 0x44}, 0x7}, {{&(0x7f0000002740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000027c0)=""/137, 0x89}, {&(0x7f0000002880)=""/25, 0x19}, {&(0x7f00000028c0)=""/176, 0xb0}, {&(0x7f0000002980)=""/74, 0x4a}], 0x4, &(0x7f0000002a40)=""/188, 0xbc}, 0x3f}, {{&(0x7f0000002b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000002b80)=""/68, 0x44}, {&(0x7f0000002c00)=""/58, 0x3a}, {&(0x7f0000002c40)=""/93, 0x5d}, {&(0x7f0000002cc0)=""/96, 0x60}, {&(0x7f0000002d40)=""/82, 0x52}, {&(0x7f0000002dc0)=""/187, 0xbb}, {&(0x7f0000002e80)=""/147, 0x93}, {&(0x7f0000002f40)=""/191, 0xbf}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x9, &(0x7f00000040c0)=""/38, 0x26}, 0x8}, {{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/119, 0x77}, {&(0x7f0000005180)=""/57, 0x39}, {&(0x7f00000051c0)=""/107, 0x6b}, {&(0x7f0000005240)=""/51, 0x33}], 0x5, &(0x7f0000005300)=""/248, 0xf8}, 0x9556}, {{&(0x7f0000005400)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/54, 0x36}, {&(0x7f00000054c0)=""/169, 0xa9}], 0x2, &(0x7f00000055c0)=""/140, 0x8c}}, {{&(0x7f0000005680)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000006800)=[{&(0x7f0000005700)=""/60, 0x3c}, {&(0x7f0000005740)=""/181, 0xb5}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x3, &(0x7f0000006840)=""/71, 0x47}}], 0xa, 0x40000000, &(0x7f0000006b40)={0x77359400}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0xfffffffffffffffa) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@private=0xa010100, @multicast2}, 0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xd2, 0x2}, {0x1}}}}, 0xf) (async) [ 1532.020940][ T26] audit: type=1400 audit(1682454362.736:446): avc: denied { open } for pid=14030 comm="syz-executor.5" path="/dev/sg0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 20:26:02 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2271, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r2, 0x450e, 0xffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r6, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) (async) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0x1) [ 1532.145893][T12246] Bluetooth: Unexpected continuation frame (len 10) [ 1532.159567][ T26] audit: type=1400 audit(1682454362.746:447): avc: denied { ioctl } for pid=14030 comm="syz-executor.5" path="/dev/sg0" dev="devtmpfs" ino=694 ioctlcmd=0x2271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 20:26:03 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x2a0000) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000080)=0x5, 0x4) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="6a03"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 20:26:03 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2271, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r2, 0x450e, 0xffffffff, 0x0, 0x0, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r6, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0x1) 20:26:03 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x2a0000) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000080)=0x5, 0x4) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="6a03"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 20:26:03 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:03 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x2a0000) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000080)=0x5, 0x4) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="6a03"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 20:26:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:03 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x80, 0xc9, 0x9}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 20:26:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) [ 1532.820236][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:03 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:03 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x80, 0xc9, 0x9}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 20:26:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:03 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x80, 0xc9, 0x9}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) [ 1533.011210][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1533.059689][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0xfffffffffffffec6) 20:26:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:04 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:04 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r5, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x3, 0x100000001) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r6, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r7 = syz_open_pts(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r11}}, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x3e, 0x0, 0x0, 0x6, &(0x7f0000000080)=[r4, r5, r6, r7], 0x4, 0x0, 0x0, {0x0, r11}}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r12 = dup(r0) write$6lowpan_enable(r12, &(0x7f0000000000)='0', 0x1) 20:26:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0xfffffffffffffec6) 20:26:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:04 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0xfffffffffffffec6) 20:26:04 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket(0x2, 0x3, 0x100000001) (rerun: 64) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r5, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async, rerun: 32) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (rerun: 32) r6 = socket(0x2, 0x3, 0x100000001) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32) sendto(r6, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (rerun: 32) sendto$inet(r6, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r7 = syz_open_pts(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) (async) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r11}}, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x3e, 0x0, 0x0, 0x6, &(0x7f0000000080)=[r4, r5, r6, r7], 0x4, 0x0, 0x0, {0x0, r11}}, 0x0) (async, rerun: 64) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r12 = dup(r0) write$6lowpan_enable(r12, &(0x7f0000000000)='0', 0x1) 20:26:04 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x7fff, 0x101}}]}}, 0x11) 20:26:04 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r5, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) r6 = socket(0x2, 0x3, 0x100000001) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r6, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r7 = syz_open_pts(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) (async) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r11}}, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x3e, 0x0, 0x0, 0x6, &(0x7f0000000080)=[r4, r5, r6, r7], 0x4, 0x0, 0x0, {0x0, r11}}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r12 = dup(r0) write$6lowpan_enable(r12, &(0x7f0000000000)='0', 0x1) 20:26:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) [ 1533.857040][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:04 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r9}}, 0x4) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0xe, 0x0, r5, 0x0, &(0x7f0000000140)='./file0\x00', 0x89, 0x301901, 0x12345, {0x0, r9}}, 0x1) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0x1) 20:26:05 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:05 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x7fff, 0x101}}]}}, 0x11) 20:26:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) [ 1534.352380][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:05 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) (async) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) (async) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r9}}, 0x4) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0xe, 0x0, r5, 0x0, &(0x7f0000000140)='./file0\x00', 0x89, 0x301901, 0x12345, {0x0, r9}}, 0x1) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0x1) 20:26:05 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x7fff, 0x101}}]}}, 0x11) 20:26:05 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) [ 1534.653510][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:05 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@can={0x1d, 0x0}, &(0x7f0000000080)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_newaddr={0x54, 0x14, 0x10, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x166, 0xfd, r0}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0x3, 0x4}}, @IFA_LABEL={0x14, 0x3, 'pim6reg\x00'}, @IFA_LABEL={0x14, 0x3, 'geneve1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[], 0x6) 20:26:05 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) (async) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (async) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) (async, rerun: 32) r8 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32) bind$rxrpc(r8, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) (async, rerun: 64) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) (rerun: 64) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r9}}, 0x4) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0xe, 0x0, r5, 0x0, &(0x7f0000000140)='./file0\x00', 0x89, 0x301901, 0x12345, {0x0, r9}}, 0x1) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0x1) 20:26:05 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@can={0x1d, 0x0}, &(0x7f0000000080)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_newaddr={0x54, 0x14, 0x10, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x166, 0xfd, r0}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0x3, 0x4}}, @IFA_LABEL={0x14, 0x3, 'pim6reg\x00'}, @IFA_LABEL={0x14, 0x3, 'geneve1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[], 0x6) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@can, &(0x7f0000000080)=0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_newaddr={0x54, 0x14, 0x10, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x166, 0xfd, r0}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0x3, 0x4}}, @IFA_LABEL={0x14, 0x3, 'pim6reg\x00'}, @IFA_LABEL={0x14, 0x3, 'geneve1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[], 0x6) (async) 20:26:05 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x3, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) syz_io_uring_setup(0x183f, &(0x7f00000002c0)={0x0, 0xfe57, 0x440, 0x3, 0x314, 0x0, r5}, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000ee6000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000001c0)) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7, 0xee01}}, './file0\x00'}) signalfd(r1, &(0x7f0000000080)={[0x80]}, 0x8) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0x1) 20:26:05 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@can={0x1d, 0x0}, &(0x7f0000000080)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_newaddr={0x54, 0x14, 0x10, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x166, 0xfd, r0}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0x3, 0x4}}, @IFA_LABEL={0x14, 0x3, 'pim6reg\x00'}, @IFA_LABEL={0x14, 0x3, 'geneve1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000440)=ANY=[], 0x6) (rerun: 32) 20:26:06 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:06 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket(0x2, 0x3, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) syz_io_uring_setup(0x183f, &(0x7f00000002c0)={0x0, 0xfe57, 0x440, 0x3, 0x314, 0x0, r5}, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000ee6000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000001c0)) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7, 0xee01}}, './file0\x00'}) (async) signalfd(r1, &(0x7f0000000080)={[0x80]}, 0x8) (async) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0x1) 20:26:06 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8042, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r2, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r3, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@empty, 0x4e24, 0x3, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x1d, 0x0, r5}, {0x8, 0x0, 0x6909, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x5}, {0xfff, 0x7fffffffffffffff, 0x2, 0x9}, 0x4, 0x6e6bb8, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private0, 0x4d5, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x3, 0x4, 0x1, 0x3, 0x101}}, 0xe8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x6) 20:26:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:06 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x3, 0x100000001) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) syz_io_uring_setup(0x183f, &(0x7f00000002c0)={0x0, 0xfe57, 0x440, 0x3, 0x314, 0x0, r5}, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000ee6000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000001c0)) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7, 0xee01}}, './file0\x00'}) signalfd(r1, &(0x7f0000000080)={[0x80]}, 0x8) (async) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0x1) 20:26:06 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8042, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r2, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) (async) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r3, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@empty, 0x4e24, 0x3, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x1d, 0x0, r5}, {0x8, 0x0, 0x6909, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x5}, {0xfff, 0x7fffffffffffffff, 0x2, 0x9}, 0x4, 0x6e6bb8, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private0, 0x4d5, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x3, 0x4, 0x1, 0x3, 0x101}}, 0xe8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x6) 20:26:06 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x178f, 0x48, 0x0, 0x4000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r6, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x11, r6, 0x10000000) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:06 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x5) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:06 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8042, 0x0, 0x0) (async, rerun: 32) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (rerun: 32) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r2, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r3, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@empty, 0x4e24, 0x3, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x1d, 0x0, r5}, {0x8, 0x0, 0x6909, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x5}, {0xfff, 0x7fffffffffffffff, 0x2, 0x9}, 0x4, 0x6e6bb8, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private0, 0x4d5, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x3, 0x4, 0x1, 0x3, 0x101}}, 0xe8) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x6) 20:26:06 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x2, 0x0, 0xa}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) 20:26:06 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x2, 0x0, 0xa}) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) [ 1535.823689][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1536.021541][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:07 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:07 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x5) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:07 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x2, 0x0, 0xa}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) 20:26:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x5) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:07 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x178f, 0x48, 0x0, 0x4000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) dup(r0) (async) r4 = dup(r0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r6, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x11, r6, 0x10000000) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:07 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='\tw'], 0x6) [ 1536.369242][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:07 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:07 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='\tw'], 0x6) 20:26:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x5) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:07 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='\tw'], 0x6) 20:26:07 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x5) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:08 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES8], 0xe) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb5}, "7c32cdab0806568f5870dffbb1662e908d3dbd0a584a7d37d910d943111760cd47b85cae4c9c679c5a98037ff7874c2eca66ea8a699f45f505148b2068dc46b702f8bb220437d63c6a8228bbcd462c2f71032c9324b300a3fb8219f4eb3513a329e3d757ae0a192ad733db7138b5cdc6c63e9bb7be9a811680e4747dfa3f6f49a50d3612b4e1471968605d0ed36a84a71ab62f0fc9e6b12cc8624fa6e619e7ef4b0be5bd02d967eeca081c3c4a84a1130f8fc9b0b0c6905cb189253aa63a7c083cc88b8ca8cf74b3c7fce784aa909d792c2d47ef07a78b9a52ac44d09b"}, 0xe1) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x34}, "3b09fc582afd85f5002d2658ed83b6388ff89b4f98fba1af1ff76bb7d5c1280b7e3ef5b23812ef9c5ce37a4bf1746d68f229c628"}, 0x38) 20:26:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x5) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:08 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:08 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x178f, 0x48, 0x0, 0x4000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) dup(r0) (async) r4 = dup(r0) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r6, 0x0, 0x0) (async) getsockname$packet(r6, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x11, r6, 0x10000000) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:08 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES8], 0xe) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb5}, "7c32cdab0806568f5870dffbb1662e908d3dbd0a584a7d37d910d943111760cd47b85cae4c9c679c5a98037ff7874c2eca66ea8a699f45f505148b2068dc46b702f8bb220437d63c6a8228bbcd462c2f71032c9324b300a3fb8219f4eb3513a329e3d757ae0a192ad733db7138b5cdc6c63e9bb7be9a811680e4747dfa3f6f49a50d3612b4e1471968605d0ed36a84a71ab62f0fc9e6b12cc8624fa6e619e7ef4b0be5bd02d967eeca081c3c4a84a1130f8fc9b0b0c6905cb189253aa63a7c083cc88b8ca8cf74b3c7fce784aa909d792c2d47ef07a78b9a52ac44d09b"}, 0xe1) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x34}, "3b09fc582afd85f5002d2658ed83b6388ff89b4f98fba1af1ff76bb7d5c1280b7e3ef5b23812ef9c5ce37a4bf1746d68f229c628"}, 0x38) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES8], 0xe) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb5}, "7c32cdab0806568f5870dffbb1662e908d3dbd0a584a7d37d910d943111760cd47b85cae4c9c679c5a98037ff7874c2eca66ea8a699f45f505148b2068dc46b702f8bb220437d63c6a8228bbcd462c2f71032c9324b300a3fb8219f4eb3513a329e3d757ae0a192ad733db7138b5cdc6c63e9bb7be9a811680e4747dfa3f6f49a50d3612b4e1471968605d0ed36a84a71ab62f0fc9e6b12cc8624fa6e619e7ef4b0be5bd02d967eeca081c3c4a84a1130f8fc9b0b0c6905cb189253aa63a7c083cc88b8ca8cf74b3c7fce784aa909d792c2d47ef07a78b9a52ac44d09b"}, 0xe1) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x34}, "3b09fc582afd85f5002d2658ed83b6388ff89b4f98fba1af1ff76bb7d5c1280b7e3ef5b23812ef9c5ce37a4bf1746d68f229c628"}, 0x38) (async) 20:26:08 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES8], 0xe) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb5}, "7c32cdab0806568f5870dffbb1662e908d3dbd0a584a7d37d910d943111760cd47b85cae4c9c679c5a98037ff7874c2eca66ea8a699f45f505148b2068dc46b702f8bb220437d63c6a8228bbcd462c2f71032c9324b300a3fb8219f4eb3513a329e3d757ae0a192ad733db7138b5cdc6c63e9bb7be9a811680e4747dfa3f6f49a50d3612b4e1471968605d0ed36a84a71ab62f0fc9e6b12cc8624fa6e619e7ef4b0be5bd02d967eeca081c3c4a84a1130f8fc9b0b0c6905cb189253aa63a7c083cc88b8ca8cf74b3c7fce784aa909d792c2d47ef07a78b9a52ac44d09b"}, 0xe1) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x34}, "3b09fc582afd85f5002d2658ed83b6388ff89b4f98fba1af1ff76bb7d5c1280b7e3ef5b23812ef9c5ce37a4bf1746d68f229c628"}, 0x38) 20:26:08 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:08 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x6) 20:26:08 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x1f74, &(0x7f0000000080)={0x0, 0xb8aa, 0x40, 0x3, 0x351}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x1000008, 0x80010, r1, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xffffffffffffffb4) io_uring_enter(r6, 0x2dee, 0x2aec, 0x14, &(0x7f0000000240)={[0x2]}, 0x8) 20:26:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:08 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x6) 20:26:09 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:09 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x1f74, &(0x7f0000000080)={0x0, 0xb8aa, 0x40, 0x3, 0x351}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x1000008, 0x80010, r1, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xffffffffffffffb4) (async) io_uring_enter(r6, 0x2dee, 0x2aec, 0x14, &(0x7f0000000240)={[0x2]}, 0x8) 20:26:09 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x6) 20:26:09 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:09 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x6) 20:26:09 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x1f74, &(0x7f0000000080)={0x0, 0xb8aa, 0x40, 0x3, 0x351}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x1000008, 0x80010, r1, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xffffffffffffffb4) io_uring_enter(r6, 0x2dee, 0x2aec, 0x14, &(0x7f0000000240)={[0x2]}, 0x8) 20:26:09 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x6) 20:26:09 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x6) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x6) (async) 20:26:09 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) futex(&(0x7f0000000080)=0x1, 0x9, 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)=0x1, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:09 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:09 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x8, 0x2}, {0x6}}}}, 0x45) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9b07f000e00050017600a0006000500000108887404561ced3e7eb8b700090047398d6802f1ea0a180b"], 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcb}, "5a019cdb783e15ff043a8ce2f70d34e8d91b980e798cf6f025118dea2406cbdce1a3e256b0da80acbb4d1102e8c48f30a26ca3c3ab105df6b3155fb95432bf51835acb0960a12778eb3c89ff4a44452f8dbadabe73e4c0dce9dd2839bd1f9688466a3c85235e53c1bc533c312d6287d22ea018f82c3efaf6f8c6bb84bc9abde64cf2f55709ff0bf8f0e2db82be9e18880fe4ba0610dbb4e14af6086733e73061803900717cab18fb13121fae89543e1cf462d04bb0f5a79b6e809bb1442667c4432efa400a5efced97468e"}, 0xcf) [ 1538.726244][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) 20:26:10 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:10 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) futex(&(0x7f0000000080)=0x1, 0x9, 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)=0x1, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:10 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x8, 0x2}, {0x6}}}}, 0x45) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9b07f000e00050017600a0006000500000108887404561ced3e7eb8b700090047398d6802f1ea0a180b"], 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcb}, "5a019cdb783e15ff043a8ce2f70d34e8d91b980e798cf6f025118dea2406cbdce1a3e256b0da80acbb4d1102e8c48f30a26ca3c3ab105df6b3155fb95432bf51835acb0960a12778eb3c89ff4a44452f8dbadabe73e4c0dce9dd2839bd1f9688466a3c85235e53c1bc533c312d6287d22ea018f82c3efaf6f8c6bb84bc9abde64cf2f55709ff0bf8f0e2db82be9e18880fe4ba0610dbb4e14af6086733e73061803900717cab18fb13121fae89543e1cf462d04bb0f5a79b6e809bb1442667c4432efa400a5efced97468e"}, 0xcf) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcb}, "5a019cdb783e15ff043a8ce2f70d34e8d91b980e798cf6f025118dea2406cbdce1a3e256b0da80acbb4d1102e8c48f30a26ca3c3ab105df6b3155fb95432bf51835acb0960a12778eb3c89ff4a44452f8dbadabe73e4c0dce9dd2839bd1f9688466a3c85235e53c1bc533c312d6287d22ea018f82c3efaf6f8c6bb84bc9abde64cf2f55709ff0bf8f0e2db82be9e18880fe4ba0610dbb4e14af6086733e73061803900717cab18fb13121fae89543e1cf462d04bb0f5a79b6e809bb1442667c4432efa400a5efced97468e"}, 0xcf) 20:26:10 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:10 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:10 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x8, 0x2}, {0x6}}}}, 0x45) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9b07f000e00050017600a0006000500000108887404561ced3e7eb8b700090047398d6802f1ea0a180b"], 0x17) (rerun: 64) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcb}, "5a019cdb783e15ff043a8ce2f70d34e8d91b980e798cf6f025118dea2406cbdce1a3e256b0da80acbb4d1102e8c48f30a26ca3c3ab105df6b3155fb95432bf51835acb0960a12778eb3c89ff4a44452f8dbadabe73e4c0dce9dd2839bd1f9688466a3c85235e53c1bc533c312d6287d22ea018f82c3efaf6f8c6bb84bc9abde64cf2f55709ff0bf8f0e2db82be9e18880fe4ba0610dbb4e14af6086733e73061803900717cab18fb13121fae89543e1cf462d04bb0f5a79b6e809bb1442667c4432efa400a5efced97468e"}, 0xcf) [ 1539.188828][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) 20:26:10 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) futex(&(0x7f0000000080)=0x1, 0x9, 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)=0x1, 0x0) (async, rerun: 32) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:10 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x0, 0x10}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x57d0, 0x66f6, 0x1, &(0x7f0000000240)={[0x8f8]}, 0x8) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x4, 0x110, r1, 0x0) r4 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_io_uring_setup(0xeed, &(0x7f00000000c0)={0x0, 0xadbc, 0x20, 0x1, 0x2e8, 0x0, r5}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) r10 = syz_open_dev$vcsa(&(0x7f0000000280), 0x8, 0x80800) r11 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x82) syz_io_uring_submit(r7, r6, &(0x7f0000000400)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r10, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', r11, 0x0, 0x1}, 0x101) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) [ 1539.326326][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.334092][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.341238][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.348725][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.355798][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.366015][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.374293][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.381412][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.388455][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.395571][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.402721][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.409844][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.416887][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.424021][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.431136][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.438176][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.446056][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.453306][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.460495][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.467566][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.475549][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.482646][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.489739][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.496766][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.503868][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.510983][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.518007][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.525129][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.532210][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.539322][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.547025][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.554201][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.561322][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.568345][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.575438][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.583449][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.590572][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.597622][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.604749][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.611872][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.619029][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.626057][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.633130][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.640229][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.647251][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.654688][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.661847][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.669015][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.676036][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.683154][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.691042][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.698069][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.705126][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.712199][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.719254][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.726279][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.733362][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.740419][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.747455][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.754879][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.763794][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.770924][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.777944][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.785020][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) [ 1539.792103][ T5017] Bluetooth: Frame is too long (len 64, expected len 10) 20:26:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:10 executing program 0: r0 = socket(0x2, 0x3, 0xfffffff8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socketpair(0x5, 0x5, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000006d00020026bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="120801000004000005002700020000001c0700000000000000f59b6c908668bf5247e94ec5de3c8c828653e3200019801400040006bbd0fcfcc989424928e70717234f73050006ff0f000000bc3f7c1e84bfb80c1fd8185116174572dc8bdce2b60b79f341931fe10a8a6a1fbc9ef9104639eaf44c1110928a4155fb7e0c7e838a0b3faf9335b12e71be8e1ac2cc38cf0e9e239167cef6f32d14438531"], 0x64}, 0x1, 0x0, 0x0, 0x4000054}, 0xc0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="19ff39555fb4998951f9ffcc2431f40984bb412a3272634cf84c9ac9d7a268d3c795efaaa7bc3f33ad5566a2183607305a5bb02cc97cecb34d08eb1e4a0f877d28120944b30f985b58ef9a9cf541335001ec2990a94675fd3811e7375a4d978aec2646dced6238976dd6eec025428f4dd8d0d7917aa4c3", 0xfffffdb4, 0x20000045, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000002c0)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x5, 0x3, 0x0, 0x80}) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x6) 20:26:10 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x0, 0x10}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x57d0, 0x66f6, 0x1, &(0x7f0000000240)={[0x8f8]}, 0x8) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x4, 0x110, r1, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x4, 0x110, r1, 0x0) r4 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_io_uring_setup(0xeed, &(0x7f00000000c0)={0x0, 0xadbc, 0x20, 0x1, 0x2e8, 0x0, r5}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) r10 = syz_open_dev$vcsa(&(0x7f0000000280), 0x8, 0x80800) r11 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x82) syz_io_uring_submit(r7, r6, &(0x7f0000000400)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r10, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', r11, 0x0, 0x1}, 0x101) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) [ 1539.979286][ T26] audit: type=1400 audit(1682454370.836:448): avc: denied { create } for pid=14355 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 20:26:10 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:10 executing program 0: r0 = socket(0x2, 0x3, 0xfffffff8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) socketpair(0x5, 0x5, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000006d00020026bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="120801000004000005002700020000001c0700000000000000f59b6c908668bf5247e94ec5de3c8c828653e3200019801400040006bbd0fcfcc989424928e70717234f73050006ff0f000000bc3f7c1e84bfb80c1fd8185116174572dc8bdce2b60b79f341931fe10a8a6a1fbc9ef9104639eaf44c1110928a4155fb7e0c7e838a0b3faf9335b12e71be8e1ac2cc38cf0e9e239167cef6f32d14438531"], 0x64}, 0x1, 0x0, 0x0, 0x4000054}, 0xc0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000180)="19ff39555fb4998951f9ffcc2431f40984bb412a3272634cf84c9ac9d7a268d3c795efaaa7bc3f33ad5566a2183607305a5bb02cc97cecb34d08eb1e4a0f877d28120944b30f985b58ef9a9cf541335001ec2990a94675fd3811e7375a4d978aec2646dced6238976dd6eec025428f4dd8d0d7917aa4c3", 0xfffffdb4, 0x20000045, 0x0, 0x0) (async) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000002c0)) (async, rerun: 64) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) (async, rerun: 64) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x5, 0x3, 0x0, 0x80}) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x6) 20:26:11 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:11 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:11 executing program 0: r0 = socket(0x2, 0x3, 0xfffffff8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socketpair(0x5, 0x5, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000006d00020026bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="120801000004000005002700020000001c0700000000000000f59b6c908668bf5247e94ec5de3c8c828653e3200019801400040006bbd0fcfcc989424928e70717234f73050006ff0f000000bc3f7c1e84bfb80c1fd8185116174572dc8bdce2b60b79f341931fe10a8a6a1fbc9ef9104639eaf44c1110928a4155fb7e0c7e838a0b3faf9335b12e71be8e1ac2cc38cf0e9e239167cef6f32d14438531"], 0x64}, 0x1, 0x0, 0x0, 0x4000054}, 0xc0) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000006d00020026bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="120801000004000005002700020000001c0700000000000000f59b6c908668bf5247e94ec5de3c8c828653e3200019801400040006bbd0fcfcc989424928e70717234f73050006ff0f000000bc3f7c1e84bfb80c1fd8185116174572dc8bdce2b60b79f341931fe10a8a6a1fbc9ef9104639eaf44c1110928a4155fb7e0c7e838a0b3faf9335b12e71be8e1ac2cc38cf0e9e239167cef6f32d14438531"], 0x64}, 0x1, 0x0, 0x0, 0x4000054}, 0xc0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="19ff39555fb4998951f9ffcc2431f40984bb412a3272634cf84c9ac9d7a268d3c795efaaa7bc3f33ad5566a2183607305a5bb02cc97cecb34d08eb1e4a0f877d28120944b30f985b58ef9a9cf541335001ec2990a94675fd3811e7375a4d978aec2646dced6238976dd6eec025428f4dd8d0d7917aa4c3", 0xfffffdb4, 0x20000045, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000180)="19ff39555fb4998951f9ffcc2431f40984bb412a3272634cf84c9ac9d7a268d3c795efaaa7bc3f33ad5566a2183607305a5bb02cc97cecb34d08eb1e4a0f877d28120944b30f985b58ef9a9cf541335001ec2990a94675fd3811e7375a4d978aec2646dced6238976dd6eec025428f4dd8d0d7917aa4c3", 0xfffffdb4, 0x20000045, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000002c0)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x5, 0x3, 0x0, 0x80}) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x6) 20:26:11 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x0, 0x10}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x57d0, 0x66f6, 0x1, &(0x7f0000000240)={[0x8f8]}, 0x8) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x4, 0x110, r1, 0x0) r4 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_io_uring_setup(0xeed, &(0x7f00000000c0)={0x0, 0xadbc, 0x20, 0x1, 0x2e8, 0x0, r5}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=0x0) (async) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (async) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) r10 = syz_open_dev$vcsa(&(0x7f0000000280), 0x8, 0x80800) (async) r11 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x82) syz_io_uring_submit(r7, r6, &(0x7f0000000400)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r10, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', r11, 0x0, 0x1}, 0x101) (async, rerun: 32) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (rerun: 32) 20:26:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) [ 1540.030070][ T5017] Bluetooth: hci0: SCO packet for unknown connection handle 0 20:26:11 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='\x00#'], 0x6) 20:26:11 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r7}}, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000140)='0', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400000, 0xd1) r9 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r10, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000100)=r10, 0x1) 20:26:11 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='\x00#'], 0x6) 20:26:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:11 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='\x00#'], 0x6) 20:26:11 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x5, 0x4}, {0x2, 0xf6}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "bde393a03b224f41b46ef38432f6998dae25fa6d02cef7afc50ac3c25f4007a80e3c3f71c99b0b0937c8b94d976aa222c42c9f56ba9af322a00d73c2f04e594771a123085458ce695982de5fdd2e6988b37d28015109a9a191da8fe80652c5da4242250fb6c5f888435096cb90fec5fbaab4609eba9a08a50cfa7f27f438827aec145dc38e6977dfa9973b7b268ded597159d25ade2a74c65d6b5c47c830a2607a9e92912b73377dc04b64b4c73506072996239115dc5ac1b445db08cf8267c54d41a569fef5f9b23e3b5e8182936b1b9672a03370a9e3c3ae5369c7de7c5fe0"}, 0xe4) 20:26:12 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:12 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x5, 0x4}, {0x2, 0xf6}}]}}, 0x17) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "bde393a03b224f41b46ef38432f6998dae25fa6d02cef7afc50ac3c25f4007a80e3c3f71c99b0b0937c8b94d976aa222c42c9f56ba9af322a00d73c2f04e594771a123085458ce695982de5fdd2e6988b37d28015109a9a191da8fe80652c5da4242250fb6c5f888435096cb90fec5fbaab4609eba9a08a50cfa7f27f438827aec145dc38e6977dfa9973b7b268ded597159d25ade2a74c65d6b5c47c830a2607a9e92912b73377dc04b64b4c73506072996239115dc5ac1b445db08cf8267c54d41a569fef5f9b23e3b5e8182936b1b9672a03370a9e3c3ae5369c7de7c5fe0"}, 0xe4) [ 1540.397827][T12246] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1541.165639][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1541.320742][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:12 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x5, 0x4}, {0x2, 0xf6}}]}}, 0x17) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "bde393a03b224f41b46ef38432f6998dae25fa6d02cef7afc50ac3c25f4007a80e3c3f71c99b0b0937c8b94d976aa222c42c9f56ba9af322a00d73c2f04e594771a123085458ce695982de5fdd2e6988b37d28015109a9a191da8fe80652c5da4242250fb6c5f888435096cb90fec5fbaab4609eba9a08a50cfa7f27f438827aec145dc38e6977dfa9973b7b268ded597159d25ade2a74c65d6b5c47c830a2607a9e92912b73377dc04b64b4c73506072996239115dc5ac1b445db08cf8267c54d41a569fef5f9b23e3b5e8182936b1b9672a03370a9e3c3ae5369c7de7c5fe0"}, 0xe4) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "bde393a03b224f41b46ef38432f6998dae25fa6d02cef7afc50ac3c25f4007a80e3c3f71c99b0b0937c8b94d976aa222c42c9f56ba9af322a00d73c2f04e594771a123085458ce695982de5fdd2e6988b37d28015109a9a191da8fe80652c5da4242250fb6c5f888435096cb90fec5fbaab4609eba9a08a50cfa7f27f438827aec145dc38e6977dfa9973b7b268ded597159d25ade2a74c65d6b5c47c830a2607a9e92912b73377dc04b64b4c73506072996239115dc5ac1b445db08cf8267c54d41a569fef5f9b23e3b5e8182936b1b9672a03370a9e3c3ae5369c7de7c5fe0"}, 0xe4) 20:26:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:12 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r7}}, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000140)='0', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400000, 0xd1) r9 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r10, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000100)=r10, 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) bind$rxrpc(r6, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r7}}, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r7}}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) write$6lowpan_enable(r8, &(0x7f0000000140)='0', 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400000, 0xd1) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r9) (async) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r10, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000100)=r10, 0x1) (async) 20:26:12 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x6) [ 1541.500810][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:12 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x6) 20:26:12 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) (async, rerun: 32) r6 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32) bind$rxrpc(r6, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) (async, rerun: 64) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r7}}, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r7}}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000140)='0', 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400000, 0xd1) (async) r9 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) getsockname$packet(r10, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000100)=r10, 0x1) 20:26:12 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x6) 20:26:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:12 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040377389c6a6c80eace1c43249a86a625e429a7980d485d706a4eb421adfb8014565d69c0995d98cd62bbcbfcacb75439d85f274e77d260272e81a35c09d465f854636eb635cfcdfa58b7d1ba63115db138047cd147b0ae70b9c06bca8b"], 0x6) [ 1542.032062][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:13 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:13 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:13 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040377389c6a6c80eace1c43249a86a625e429a7980d485d706a4eb421adfb8014565d69c0995d98cd62bbcbfcacb75439d85f274e77d260272e81a35c09d465f854636eb635cfcdfa58b7d1ba63115db138047cd147b0ae70b9c06bca8b"], 0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040377389c6a6c80eace1c43249a86a625e429a7980d485d706a4eb421adfb8014565d69c0995d98cd62bbcbfcacb75439d85f274e77d260272e81a35c09d465f854636eb635cfcdfa58b7d1ba63115db138047cd147b0ae70b9c06bca8b"], 0x6) (async) 20:26:13 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) [ 1542.237879][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1542.245012][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:13 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040377389c6a6c80eace1c43249a86a625e429a7980d485d706a4eb421adfb8014565d69c0995d98cd62bbcbfcacb75439d85f274e77d260272e81a35c09d465f854636eb635cfcdfa58b7d1ba63115db138047cd147b0ae70b9c06bca8b"], 0x6) 20:26:13 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) (async) 20:26:13 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) pread64(r0, &(0x7f0000002c40)=""/28, 0x1c, 0x9) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x47a6, 0xfffff000}}, './file0\x00'}) sendto$inet(r1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00', 0x6, 0x30, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x6) sendmmsg(r1, &(0x7f0000002c80)=[{{&(0x7f0000000140)=@l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff9, 0x1}, 0x80, &(0x7f0000002480)=[{&(0x7f00000001c0)="baa7b2e88eb84339c5731f05880f0bc22e529bbf4af65e30b44383fbc6db6844f9544d68dacd201172952426230fa934bdb3893cbc6282da849b755db9f3944770250320b14a6a3fa88d1d70df1394f945eb6db5b58bc54655fbc555aac8b7286fc369aa1f7269f0ba510d9b178f96ee24b7ac154f7cefd53018a46aa01d5f535bca870035ab1379e9b9d9f731f3944eb68444966d3addd3698109a3c0", 0x9d}, {&(0x7f0000000280)="f091e745f8ed2b188254d5847c1e210f1c7def30a9dede9fded21a093361bc711e859001648080d5ea1a7fff3b3afcb1d3f54b222f6cf976", 0x38}, {&(0x7f00000002c0)="f6bdb4820de903cb7450bd2ebf780823f92f6d442e94c1579a436264ebe1c40862e9788135ee929bb7404e938cd718cdb3b62235a1f071d6e85104578d9b5da35f4ee0ec0a891285386adc793a3d87055cd5ee59453c297bfed79e024381fa08adfdfff2f944c084b7c04695cf3d9ba3d11f69a63e9956373c4cfb73d0fcbf15159db65cc360189f24b4856b337c3d07a97c8cba99bc1ca4a9", 0x99}, {&(0x7f0000000380)="4c0a3f7e141414c822c743a098383efee40de7ded1859324a7c13decc641f120da550a1d356aaa3826172ac5080d3b81caf6b712b740075b04ca744a01a6c2a903b886f6277e9d3b3272e6a230de051e20c3e6bc7fadf9486596ca1e09", 0x5d}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="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", 0x1000}], 0x6, &(0x7f0000000400)=[{0x40, 0x1e, 0x101, "ce895b97d39b7bb2f253ede8f67ffd7f3029ff9fae8bc8578ba350959d506b3b23d8489f92884b78bb0ccbe0c0c939"}], 0x40}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002500)="9635036800ce3336da8485bb5c3ce5732306b705cc21180852da2649aec39e60cf7738476c758e3f066861da872d0e82fd6bffd5bc4106d40a2984df4feb8674b6998c82d7974babc71d43a509bc549f90217d568e7c1e572e53e9414e16d8b6146a499750a882f233a48e3dc08360458ac4385b192765192bc2107d499512efb9fd399d816000e16e9e2d490b2b490151b36a207bc86fa9f15df45ce1f8a0a445dcc99d709c15b0ddddb6f76c94ffba6c7df59d512f95e36373d59ea02de89c0e8d", 0xc2}, {&(0x7f0000002600)="7e76e5aad6b3939095799d36c44e5139c2f8b2118c5fb05cea4192002b194c542d85951c7d0cfefb7f2874546bc84212f9f1d1da7ce891945137d5ce1916b089ce242fe9b2079232b8e61d01464822ac017af1b14b374f79ed55f73961df75d9", 0x60}, {&(0x7f0000002680)="7cefc40b27cd9018a37e2a70dcae8aa4bca41be6dc22dca5bd02a6b48124bc45e727ea1bf3f6102a97668a116d279bdea5cbe08ca245adbf389aa79c99b84544493e37ab207c5c14e451b58f111283b24596491c", 0x54}, {&(0x7f0000002700)="de363089e45ae1aa519543489fbad30b535f8dc8302f97bc0b8ec643", 0x1c}], 0x4, &(0x7f0000002780)=[{0xe8, 0x110, 0x3, "55a08c3bcd2683669c314b11cd4209c33c89a10f4f4be7b60b396769274d8e7e56f7f849bc02c807aba21a386b72a6feb74f464a01fa6ffaf9ebe1642e792afef9b8882e2d4a91ef70931057288648bdcd892e1e68abf3cf02e8ee44652bfbc980f4768ac90b7f9dadc82b586178f4a54ca7bee3f0747566f6615f0ea1a7b50366e01ac0ab11c1f173ec543363c1c27e51fb20ed0ac67b1ce1fb09cec1724cda0ff7c8f42e7cb465f136bdb38062e4867e9303a52d7db8a75f9bce8ae0a05d75622b873cc988b8d0c6f0a074bdb2c0981e6f88e56ebfdc2b"}], 0xe8}}, {{&(0x7f0000002880)=@generic={0x23, "71d04affc719493606452660b5b47b1923978b4048c1eceb10a0c77a438429d26b4cbcd1ee1b58236874f7c9b1722b3ee2db52a6dc97d1e5c99bb950343c67cbc66293af91717b439580908c66b941667541decef18104e43f9c996b54149ce49951754afbc0ad640c5d2d9e221b5bed146927ceefd7cc3a3080f33e3625"}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002900)="6866604cf7854074fa0f5f3d559316b7b2a78d2acf478bd6d85e9e7c003a4f796912ab2b45b398d09a59c690c59177aaeca4c21c8c38a860e857defb5efa1b6c323ad087a93d1cc8b3442657f8895c456652837e07e64781a591cd388526355d139abaeda8bd7b8c5a910ec1997a002a1e80f132a6667940bb073c87e37bafb3ffd77fa9b68e75d08f440e2d368e4df226a5841cf0eb8769e2a69ddc6635168e9b6be02777fc7dc86358e94f0a5f0e91699126", 0xb3}, {&(0x7f00000029c0)="022c3d0dfab062ea0258afbbc1e98775daae3c037ad3b1e7b7a6af8ec7a20428ef613bdefbfd89052f14ea22510fcd146e335577e2dae0e3169f0181a2d393e0b6b8717678bbe829e28faa358b08174bfec2fd0172ae3c93d0e69a1e719ab360ac8d02786556359e4f197fb952304407b3fe7dd615eec24a3c4ae8640c970daae112fa98537e18f4bfc23cdc15552de3612ea9a62568297d63c760023cb876eea247c47cc41bcd825367c403ff4ba96047c0754ade75f76816aad379911c4db6", 0xc0}, {&(0x7f0000002a80)="5df8efdc592512eb0ff3de87d9c93b033a5938a8d085762f1cb87ab3854fe71c6a5406f62abdcaa78c96badaa36be94d682431e00b62934643ca7bf602dc1e25d9", 0x41}, {&(0x7f0000002b00)="4728974a3a581656747db5edd52c6a394858c235db46de81a87a7900c51e22448132b66dc9d7fea8494e5017f05a14202190705dab0f3c1f6ddce877d9a1b5462da0e88d1ddac53c08d77f69e3a2b79dc47b896c420671d2b3054ff739693d759e2680770b99b52f34f139f3bcb9cccb767d1e0a01be376fe1a01e529172fa8714c08746a91171a36ad77f3516f44093821b8db214a84f86add79f64ce41a8e9c430cb2dc14e343eb6629c5723b919aee43a050f522dce9335361f1e14c7deb046e180bc7fa5d7cfe686f97d07eebd80540412b7ad2c80", 0xd7}], 0x4, &(0x7f0000002c40)}}], 0x3, 0x1) [ 1542.454437][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:13 executing program 0: socket(0x2, 0x3, 0x100000001) (async) r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) pread64(r0, &(0x7f0000002c40)=""/28, 0x1c, 0x9) (async) pread64(r0, &(0x7f0000002c40)=""/28, 0x1c, 0x9) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x47a6, 0xfffff000}}, './file0\x00'}) sendto$inet(r1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00', 0x6, 0x30, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00', 0x6, 0x30, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x6) sendmmsg(r1, &(0x7f0000002c80)=[{{&(0x7f0000000140)=@l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff9, 0x1}, 0x80, &(0x7f0000002480)=[{&(0x7f00000001c0)="baa7b2e88eb84339c5731f05880f0bc22e529bbf4af65e30b44383fbc6db6844f9544d68dacd201172952426230fa934bdb3893cbc6282da849b755db9f3944770250320b14a6a3fa88d1d70df1394f945eb6db5b58bc54655fbc555aac8b7286fc369aa1f7269f0ba510d9b178f96ee24b7ac154f7cefd53018a46aa01d5f535bca870035ab1379e9b9d9f731f3944eb68444966d3addd3698109a3c0", 0x9d}, {&(0x7f0000000280)="f091e745f8ed2b188254d5847c1e210f1c7def30a9dede9fded21a093361bc711e859001648080d5ea1a7fff3b3afcb1d3f54b222f6cf976", 0x38}, {&(0x7f00000002c0)="f6bdb4820de903cb7450bd2ebf780823f92f6d442e94c1579a436264ebe1c40862e9788135ee929bb7404e938cd718cdb3b62235a1f071d6e85104578d9b5da35f4ee0ec0a891285386adc793a3d87055cd5ee59453c297bfed79e024381fa08adfdfff2f944c084b7c04695cf3d9ba3d11f69a63e9956373c4cfb73d0fcbf15159db65cc360189f24b4856b337c3d07a97c8cba99bc1ca4a9", 0x99}, {&(0x7f0000000380)="4c0a3f7e141414c822c743a098383efee40de7ded1859324a7c13decc641f120da550a1d356aaa3826172ac5080d3b81caf6b712b740075b04ca744a01a6c2a903b886f6277e9d3b3272e6a230de051e20c3e6bc7fadf9486596ca1e09", 0x5d}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="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", 0x1000}], 0x6, &(0x7f0000000400)=[{0x40, 0x1e, 0x101, "ce895b97d39b7bb2f253ede8f67ffd7f3029ff9fae8bc8578ba350959d506b3b23d8489f92884b78bb0ccbe0c0c939"}], 0x40}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002500)="9635036800ce3336da8485bb5c3ce5732306b705cc21180852da2649aec39e60cf7738476c758e3f066861da872d0e82fd6bffd5bc4106d40a2984df4feb8674b6998c82d7974babc71d43a509bc549f90217d568e7c1e572e53e9414e16d8b6146a499750a882f233a48e3dc08360458ac4385b192765192bc2107d499512efb9fd399d816000e16e9e2d490b2b490151b36a207bc86fa9f15df45ce1f8a0a445dcc99d709c15b0ddddb6f76c94ffba6c7df59d512f95e36373d59ea02de89c0e8d", 0xc2}, {&(0x7f0000002600)="7e76e5aad6b3939095799d36c44e5139c2f8b2118c5fb05cea4192002b194c542d85951c7d0cfefb7f2874546bc84212f9f1d1da7ce891945137d5ce1916b089ce242fe9b2079232b8e61d01464822ac017af1b14b374f79ed55f73961df75d9", 0x60}, {&(0x7f0000002680)="7cefc40b27cd9018a37e2a70dcae8aa4bca41be6dc22dca5bd02a6b48124bc45e727ea1bf3f6102a97668a116d279bdea5cbe08ca245adbf389aa79c99b84544493e37ab207c5c14e451b58f111283b24596491c", 0x54}, {&(0x7f0000002700)="de363089e45ae1aa519543489fbad30b535f8dc8302f97bc0b8ec643", 0x1c}], 0x4, &(0x7f0000002780)=[{0xe8, 0x110, 0x3, "55a08c3bcd2683669c314b11cd4209c33c89a10f4f4be7b60b396769274d8e7e56f7f849bc02c807aba21a386b72a6feb74f464a01fa6ffaf9ebe1642e792afef9b8882e2d4a91ef70931057288648bdcd892e1e68abf3cf02e8ee44652bfbc980f4768ac90b7f9dadc82b586178f4a54ca7bee3f0747566f6615f0ea1a7b50366e01ac0ab11c1f173ec543363c1c27e51fb20ed0ac67b1ce1fb09cec1724cda0ff7c8f42e7cb465f136bdb38062e4867e9303a52d7db8a75f9bce8ae0a05d75622b873cc988b8d0c6f0a074bdb2c0981e6f88e56ebfdc2b"}], 0xe8}}, {{&(0x7f0000002880)=@generic={0x23, "71d04affc719493606452660b5b47b1923978b4048c1eceb10a0c77a438429d26b4cbcd1ee1b58236874f7c9b1722b3ee2db52a6dc97d1e5c99bb950343c67cbc66293af91717b439580908c66b941667541decef18104e43f9c996b54149ce49951754afbc0ad640c5d2d9e221b5bed146927ceefd7cc3a3080f33e3625"}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002900)="6866604cf7854074fa0f5f3d559316b7b2a78d2acf478bd6d85e9e7c003a4f796912ab2b45b398d09a59c690c59177aaeca4c21c8c38a860e857defb5efa1b6c323ad087a93d1cc8b3442657f8895c456652837e07e64781a591cd388526355d139abaeda8bd7b8c5a910ec1997a002a1e80f132a6667940bb073c87e37bafb3ffd77fa9b68e75d08f440e2d368e4df226a5841cf0eb8769e2a69ddc6635168e9b6be02777fc7dc86358e94f0a5f0e91699126", 0xb3}, {&(0x7f00000029c0)="022c3d0dfab062ea0258afbbc1e98775daae3c037ad3b1e7b7a6af8ec7a20428ef613bdefbfd89052f14ea22510fcd146e335577e2dae0e3169f0181a2d393e0b6b8717678bbe829e28faa358b08174bfec2fd0172ae3c93d0e69a1e719ab360ac8d02786556359e4f197fb952304407b3fe7dd615eec24a3c4ae8640c970daae112fa98537e18f4bfc23cdc15552de3612ea9a62568297d63c760023cb876eea247c47cc41bcd825367c403ff4ba96047c0754ade75f76816aad379911c4db6", 0xc0}, {&(0x7f0000002a80)="5df8efdc592512eb0ff3de87d9c93b033a5938a8d085762f1cb87ab3854fe71c6a5406f62abdcaa78c96badaa36be94d682431e00b62934643ca7bf602dc1e25d9", 0x41}, {&(0x7f0000002b00)="4728974a3a581656747db5edd52c6a394858c235db46de81a87a7900c51e22448132b66dc9d7fea8494e5017f05a14202190705dab0f3c1f6ddce877d9a1b5462da0e88d1ddac53c08d77f69e3a2b79dc47b896c420671d2b3054ff739693d759e2680770b99b52f34f139f3bcb9cccb767d1e0a01be376fe1a01e529172fa8714c08746a91171a36ad77f3516f44093821b8db214a84f86add79f64ce41a8e9c430cb2dc14e343eb6629c5723b919aee43a050f522dce9335361f1e14c7deb046e180bc7fa5d7cfe686f97d07eebd80540412b7ad2c80", 0xd7}], 0x4, &(0x7f0000002c40)}}], 0x3, 0x1) 20:26:13 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 64) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (rerun: 64) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) [ 1542.547542][T12246] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1542.643420][T12246] Bluetooth: hci0: Received unexpected HCI Event 0x00 20:26:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:13 executing program 0: socket(0x2, 0x3, 0x100000001) (async) r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) pread64(r0, &(0x7f0000002c40)=""/28, 0x1c, 0x9) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x47a6, 0xfffff000}}, './file0\x00'}) sendto$inet(r1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00', 0x6, 0x30, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x6) sendmmsg(r1, &(0x7f0000002c80)=[{{&(0x7f0000000140)=@l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff9, 0x1}, 0x80, &(0x7f0000002480)=[{&(0x7f00000001c0)="baa7b2e88eb84339c5731f05880f0bc22e529bbf4af65e30b44383fbc6db6844f9544d68dacd201172952426230fa934bdb3893cbc6282da849b755db9f3944770250320b14a6a3fa88d1d70df1394f945eb6db5b58bc54655fbc555aac8b7286fc369aa1f7269f0ba510d9b178f96ee24b7ac154f7cefd53018a46aa01d5f535bca870035ab1379e9b9d9f731f3944eb68444966d3addd3698109a3c0", 0x9d}, {&(0x7f0000000280)="f091e745f8ed2b188254d5847c1e210f1c7def30a9dede9fded21a093361bc711e859001648080d5ea1a7fff3b3afcb1d3f54b222f6cf976", 0x38}, {&(0x7f00000002c0)="f6bdb4820de903cb7450bd2ebf780823f92f6d442e94c1579a436264ebe1c40862e9788135ee929bb7404e938cd718cdb3b62235a1f071d6e85104578d9b5da35f4ee0ec0a891285386adc793a3d87055cd5ee59453c297bfed79e024381fa08adfdfff2f944c084b7c04695cf3d9ba3d11f69a63e9956373c4cfb73d0fcbf15159db65cc360189f24b4856b337c3d07a97c8cba99bc1ca4a9", 0x99}, {&(0x7f0000000380)="4c0a3f7e141414c822c743a098383efee40de7ded1859324a7c13decc641f120da550a1d356aaa3826172ac5080d3b81caf6b712b740075b04ca744a01a6c2a903b886f6277e9d3b3272e6a230de051e20c3e6bc7fadf9486596ca1e09", 0x5d}, {&(0x7f0000000480)="04ef408973b260cc9e0735b712844d7da81b9ae72931247c6aa8c0b907b36ce28d507fe1347e238969de1b570e8dd93468b2900d9acf5e012064e571d6d01e089441644c4832da14de56ae7d011df634e42b5388c9f64216914c115888cd87136165079738c79e07edae059e93840d9bf6ea7cdf76d7c061fb09c85631fbf14780f5c6ce2277800761e54c3fc6f4903539431cc49d25a8798b15fcd7ea1b12b51f760038cd84e4d0b4ee0a847e77daa1cfe22f66a223be4886d551805dfaba18837f834497c51adb95ccc45d9e10ab30c967737afd48fea37d1285e07b94d282d7c6bb0cbc80f72fcbc7331f6a740fb36355c5210db7158b5fe91efbf2adcdda4e3867505d9d0d4da3301dcb53b577d695bdc837bb6647af83234bcb244d6121e729243ea7e8b05c6cfc8f05b1f5de8565e126045e539f33a5e7cd4c00ec6c79133acd9a40fc8bcf20a5f4e7d65651f4f3aec06387822e8be7d3a1d1ad6d166db583c449467e784fff941786a845fc478b698900c7a50ccd9caf059fe1f5e9f87cbbf2dfc9ef59f64f8da57f977f8e7d1f98c37a8545ac22f7d3bc3491ca4b1dd196e67b137d11b3029d9a3542c6944df3a77c5d0ebcde2a0cdd6a095c1d7a1d22caebdc63a115b78d46590840a39089561f235464016c5875ec0301aa99847b2d887d8917b3a5c10496b2a995000006ff14ce6589493b91ece86bddd9fad15cbda3d3da3522803753a38ab63330acb1e8361739d6f1c2b40ee01ce40c44d5522c9fdafea1659f6ec6aee853d960ce2b179e3bdb7fae44b426e14691ab749ee23debd84d83fc8ed2a58b89fe2a050b8c3df9f74d483a44f166eac3fe4b320255e433383316e84fcc931c8bb355faebbe88506aee7b6afae3f7c04d1e39152889970b4bbd7fea2e76abb706142dbb2a51ab0dc88dae27f07a5a35fe7b50b68823bf83e50cac60598b78a650bd5287ff3048241eb0725693a3ff14f52203c9d9f6b3fb3eb425acc3ccd8127cfd8e69b871089fa962b4240211c1569d8b0332eb107f1dee46cce408cd3ec12bc9f53acfbdbe494d1aafc02c31d7016e9cc4a8b6207d004c9bea6e19f07ff66cea54b39ba13fed0a75fdf46b060da423e8b1ee4930316b7baffef0cc5881d23ebbf5b7759eba9f1ad7469f091d814c8f64e8abe3a5f2d2abf85c76de0f7c5901b005bb270137030ce6049888eebcc3877babf7e059c5a54a55ea5687e72283b517b3c3089813ad6af49a5e97d3efdee8af00b61cd2e8ac8f11d62bc667e087c6ff13189a8d6bbd10aa101f1dd45d7903060099353d8c78a709893af6101f4f1cd4d2a2aa7bd280e76c8fdbec415e1a77fd2b69f5b4b30c6e652eeba59337169a9e68ff11655f3dfc065a317a5f7bdeb25ef27761342cfb7e72510e1b529e66d6340b92b00aa94397738b780700a1faf6bc944158a054a5c56098c0732fce7236b06359f6a9c7fa5d5a58c89826ceea00c807cfd1be6b2bc96e1713abf94d66ac648b41789f4f54bfdfb06a49424484d3e9547933a2263729328bec610eb333f52465e8b2e2b9c03735419708caf7e836dbaad718e4a40bdd420984cfdb91467abbac57a9c890ddde2046ad0a95c83f68c25c88163538eeab0b5a3acd5e81d832c110cfe2337123880ec01ae0ec4826197273b2fbd879430b93a79ff1c260e6772e0c0b26723783c5ef43cd2b5cfbe34e6807d4f88fae0bb4fe55dea77f5ee9cecdf817277d051dfaeacf28cf9d548435d4b49089a870abfa7bf088a7251781f3df1a1dc90d41f5882d9a428876879de226ea93b66f8e8e4f44d3e5047fa7f1b849449372a1c5725537b72b637343c494397a3c4fa9a406ae82071b9471384ae78e32c040da5d148d7e921a246d4feaf2b0967752f8bd3e9a8bc4b9388704704ec9232437f2eb7452d8f3b81d380f22cfbacc1b082fe3065c22a35a8788c164d28b8e467858d2ae81db36748bdc7fb42e2caaf687da330c8cdd1013058c6806fa5d7ad127d1d552c6f2ab64574faa103c1a6df375d4061d1be5859e295c464ad61e2d9ab333db862a0f2b2f8dad86e7622226ec65ec1781d8b045cbb54de0b1fa022c106d0b3c18ff4e5decb1975d4699ce8314e9102a942fd115968faf251a8449ed4e1ef56681550b9b0e5c059f1b88f3794f5a5585e9fe11679152a8c5a472b4c8950e89ef76fbde1fbf26629a1fefe3b2394825ae34d783235cbf9b89de63fd398ba2afe6a10c08b4817b0f50eaa9da0594f56dd5db87df8cad6cc3d4261ffd434681fb3b54b22604cbbada82fb2de20b7cc48b97b0d5ea9966e7ecaa45d23213c2c5cf294061b4ea3c815672c12dda5b6004e3839c1c98efe26dd8432c18ba6d2296d72ff3eb3d485a5549103cef4ed7ad744d08fe8551de0c720b82a035a1031fd62f943e525d7d8d6921447c2581f6467f583eb9c83394fb0b1ef401a30f7acfb5f6c9f6a21f5d50607d8c4873568a4245a5fae8245a892a4b336f8f08a99e65485b33b3a2f0ebf682d8d53e8cf7fbe92797397114fcaa8cd1bdec164994ff9fc292d94bd842df92ee4e8b140d7a89c025bd94a37450bdc73e854c68ece8fadab74d43a91ea7acf2fa1320bfb3178ec333135be11cfd915ca7939143cac3f7cfa137625e0821211523f460b64d0a90f9b5108a8b99860b084b61cb3a4471767d1d8afeede88c16fdda2bb03f7f4c6f636c69d5d8c268cf7faebaa0594f5f9a9b3a61f8111aafb21450bdc335dcaf31bf1a5315c97eb0f681e159b95f0613720e9f60c25ad6780afc44812d525a01bd0b4fb935f060f6b804162a851708b4c76e9e5107c095ffa81fd88bd3232d4d0501a9e90255d4b33362dcc98486a6ed28b1131af8c0dacfbee179f644acaa759d133a4e794f98288f1553c823ac5dba91ae1c031d63813f2c383a58a54e396f81658bda14b2fb1d0e94e0ceff8616398af6cc61d594f2d13d6f5e9ccbe53770fce4eae2e2737a343d3ba21f2ea408a066acb89a94b0edb80bee6147ae193743135225262061706fb274bde999d36a159f9e82a5868569b945326be581bb1ef7abbea3cbbed6710ce9d5986309143db9d71112530ae2e176ea4b8fffa44a3455f39008103d7ff0a75d1fd724e4e23220f5b3bb56a8c7f0837bb15b6355e6421290379a3711974470dff2e8efc700856ec482db79f997a44a32395b88ebb2f16314cc5222ed245984e215f81bb7ecdd9a6f9bd9d8dcee921c0d89aced0573d57d9b9cff1c197d12b9db30ecfc97794ead957343ce8cccac15b6f8369845482e530011075bbde697153b37562f59485eb33f365c54d1b6d1586d6e116d1772dda17cd09cc649faef7bfc89a2ce2bd38fd5d645401d958564652ac014785eba9b03898d44f20ba8ad9844ddab4d5df8ad37e3d6e4fe71f8a34f02a0c248fda64df3d6c45b1748fad6278184b7b74e6da319d1630ce774dc7e1dfee4e9b922bc2bcb7d0b246e3527df73d292de20426f0e2b2494c76a6e45a111bc801438da31edc319abc346e1414dfb8cc712279e9958b88faec19925f9245a6db91d992f474cf5d131ecb152bc0074c9e0f3fbe23b128cfe4e2e4a3308d30b9833d3bb51949b0f5a8aeeeea25b9e899deee2654c0b87488c3bfdc277f0f51cb520b21a4ff17b0bb9e52c79bfedc2641acc22bcaf4dfdf5c19f620e1b52e63f3513c22a52869563b5e8205eaaa56a05bb4a3795f3be6005538feb948624c9ad5c767fe77ad5492ce91093b96d2eadf37a7d893724bb742db2a69162558de8dad07f35509c97682f9d6fb0f8b06d16b2e4e26fc1cf13dfd7eaa32631ac3bcc1396e021839c85dea0fdbb45ef5aef11bb59a103175d2b5d927836a5b81f22dfeb6234d98d397ab3217d49bbe8ccdeb55385796aad0b45478d629c5149cc4bfb932ef7ac93e2bc9004773379807096050d30061d26ad6c012407e485f7933433eac058df98461691051c075f6bc923af312b7057b79e84b491c216e096b692de1a3af952384c8e1d188026730e5abb60d40e9e0f7a1ad460408e955f26106438f49d75540e6fa1b112c213c1503374d7c9552e2e7a162f2105ff8ec1fc4d3dc1778e67373d09c93bfca253ac041299dda5de49721760c883de9f2dde2085194463ebb115ce80530e753eb9014e49eda3231127ae8e99fa4ba766f9c481af82c58420f64f8734acb55ba8866a702c9bb6c89c39ae4c572b5ab4e53dd9db74be543c7c6d1962d2f92ee620bd28b161ccba24c80d813786e7b197f862482de1702eb8f447c2685459391d52beb49943a2727c18e6aefa0186d56267841aee5deeb404f11abf40e3d9377e2f2c52ba1e73a7067d9f7922075442b69ae472cdb16b356bb23fa832e88c47ce3d855cc2d8048e6be14d20f0d1a547adc641c098087e16cd8e2c373fc166ca31717a46b1e310d802d59071374a812daf61f05ef55807806ffc28ea800eb23f7c90ed7d6357ecc65f6671cd84489111c7379f1523f408b593c59163c108dbd43cc4cca69e0d477d5f300e6dc51c7d49d014a1c81da0302cd836d45100152e5e008f86586e26198780ce588c434594b208eb931af094f649133e1c202822a05744c479f6470a22b1cfb905a53e1d4727e08cb11f7e3e49a78ba4fd5e1eceee164f06a85af89af822129a6409917b333023c178ef60d410b6085c39694b80df26d31ead7375de6eaa0da6f5321d6b406bafb5d5e571ddfe5e0a3a562cb29dbb76c00056cd3eac67bebbe51cedb4782f19a96b8ecf280dd398bd628ee103ad62a9bfe140c2302f0d8b47d3ab53e5abc38bd115f771dae617fb995bb529b74edb874ab7c05b28190738acdf54e08904c2440192708434f636060158b9a9191366a992eeabae6fdf54ddc431d50b7e96691c62d123f3b602463c1bd5851ddd66cd8f0be4d6f1fb9277fa8107654e683037345d8f5182a5ace89015e70695950d8190545b97972d8a719b275db13380f1a67ff771a3997c604f869d80cfd426912cbc669a8eff696be16cb8b2538cf71819957d48cb2a097b607c4209eaeb3d3d318fd9aa2be81cfb8bd853420b86c077db940c10f888e83332aa267bbf57041699278c6cde86463e98232717bc8db29a4f526e224883aeaeda1fb303a784410db14d6b671f2813ca7f50b1a31089e38982c41043fb2f1f1ee3127d6292ec36bfe342bafd68b1904e8e1d7838d4d8300c9091222f2a8d0d934f73eaec8887c9154c918187ee335c3885a1e84e78aa7abf5a1470d4ae43b6edf6226bf16915cde5609a8ddc18d5d6c7db4812ac47bc675f947df1fb42cb4a0212e7f6aaf1e55c1a6fb3c44b0db4da917247f786b48ade271f48c8f470ba8b353f0461b9c1733c5cc5e243c31841a7c3deaeb6abee94f0a4dafdd10762ab9f9998baa28d0454a126761a2503a039512202e04b9b952e31d2ef397b6cc51c7c12449f176f6233a961cf1f5985073f930be502642b21fe754b3e7ab43d8c5cc48fe523c72576da5ca1b09e59167c411ea6d1edb9170c3900753ed50ee45780fd238088adea0c5c09c3af56e2bdb6700d8dc8f1b87294b057772b93f790e2d98f8fac9858ce658675ec82519178fc683974510a5806d93cfff92ef6fc0f56164030d14204772f7b57dd6819f5b096de73c4793df517444ec0907032b0854ef3bbedc274a3c7d5fe0b42e6de34b1576ae5523bbfc74b8b7aea1f5e714635cf41ab1198739fb030ce9d44d1b13673a2e09ae012043637c43f0aa57828b467b6ce44ed00f9843cc8ccfbbd34e5e1a8f95e3d", 0x1000}, {&(0x7f0000001480)="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", 0x1000}], 0x6, &(0x7f0000000400)=[{0x40, 0x1e, 0x101, "ce895b97d39b7bb2f253ede8f67ffd7f3029ff9fae8bc8578ba350959d506b3b23d8489f92884b78bb0ccbe0c0c939"}], 0x40}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002500)="9635036800ce3336da8485bb5c3ce5732306b705cc21180852da2649aec39e60cf7738476c758e3f066861da872d0e82fd6bffd5bc4106d40a2984df4feb8674b6998c82d7974babc71d43a509bc549f90217d568e7c1e572e53e9414e16d8b6146a499750a882f233a48e3dc08360458ac4385b192765192bc2107d499512efb9fd399d816000e16e9e2d490b2b490151b36a207bc86fa9f15df45ce1f8a0a445dcc99d709c15b0ddddb6f76c94ffba6c7df59d512f95e36373d59ea02de89c0e8d", 0xc2}, {&(0x7f0000002600)="7e76e5aad6b3939095799d36c44e5139c2f8b2118c5fb05cea4192002b194c542d85951c7d0cfefb7f2874546bc84212f9f1d1da7ce891945137d5ce1916b089ce242fe9b2079232b8e61d01464822ac017af1b14b374f79ed55f73961df75d9", 0x60}, {&(0x7f0000002680)="7cefc40b27cd9018a37e2a70dcae8aa4bca41be6dc22dca5bd02a6b48124bc45e727ea1bf3f6102a97668a116d279bdea5cbe08ca245adbf389aa79c99b84544493e37ab207c5c14e451b58f111283b24596491c", 0x54}, {&(0x7f0000002700)="de363089e45ae1aa519543489fbad30b535f8dc8302f97bc0b8ec643", 0x1c}], 0x4, &(0x7f0000002780)=[{0xe8, 0x110, 0x3, "55a08c3bcd2683669c314b11cd4209c33c89a10f4f4be7b60b396769274d8e7e56f7f849bc02c807aba21a386b72a6feb74f464a01fa6ffaf9ebe1642e792afef9b8882e2d4a91ef70931057288648bdcd892e1e68abf3cf02e8ee44652bfbc980f4768ac90b7f9dadc82b586178f4a54ca7bee3f0747566f6615f0ea1a7b50366e01ac0ab11c1f173ec543363c1c27e51fb20ed0ac67b1ce1fb09cec1724cda0ff7c8f42e7cb465f136bdb38062e4867e9303a52d7db8a75f9bce8ae0a05d75622b873cc988b8d0c6f0a074bdb2c0981e6f88e56ebfdc2b"}], 0xe8}}, {{&(0x7f0000002880)=@generic={0x23, "71d04affc719493606452660b5b47b1923978b4048c1eceb10a0c77a438429d26b4cbcd1ee1b58236874f7c9b1722b3ee2db52a6dc97d1e5c99bb950343c67cbc66293af91717b439580908c66b941667541decef18104e43f9c996b54149ce49951754afbc0ad640c5d2d9e221b5bed146927ceefd7cc3a3080f33e3625"}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002900)="6866604cf7854074fa0f5f3d559316b7b2a78d2acf478bd6d85e9e7c003a4f796912ab2b45b398d09a59c690c59177aaeca4c21c8c38a860e857defb5efa1b6c323ad087a93d1cc8b3442657f8895c456652837e07e64781a591cd388526355d139abaeda8bd7b8c5a910ec1997a002a1e80f132a6667940bb073c87e37bafb3ffd77fa9b68e75d08f440e2d368e4df226a5841cf0eb8769e2a69ddc6635168e9b6be02777fc7dc86358e94f0a5f0e91699126", 0xb3}, {&(0x7f00000029c0)="022c3d0dfab062ea0258afbbc1e98775daae3c037ad3b1e7b7a6af8ec7a20428ef613bdefbfd89052f14ea22510fcd146e335577e2dae0e3169f0181a2d393e0b6b8717678bbe829e28faa358b08174bfec2fd0172ae3c93d0e69a1e719ab360ac8d02786556359e4f197fb952304407b3fe7dd615eec24a3c4ae8640c970daae112fa98537e18f4bfc23cdc15552de3612ea9a62568297d63c760023cb876eea247c47cc41bcd825367c403ff4ba96047c0754ade75f76816aad379911c4db6", 0xc0}, {&(0x7f0000002a80)="5df8efdc592512eb0ff3de87d9c93b033a5938a8d085762f1cb87ab3854fe71c6a5406f62abdcaa78c96badaa36be94d682431e00b62934643ca7bf602dc1e25d9", 0x41}, {&(0x7f0000002b00)="4728974a3a581656747db5edd52c6a394858c235db46de81a87a7900c51e22448132b66dc9d7fea8494e5017f05a14202190705dab0f3c1f6ddce877d9a1b5462da0e88d1ddac53c08d77f69e3a2b79dc47b896c420671d2b3054ff739693d759e2680770b99b52f34f139f3bcb9cccb767d1e0a01be376fe1a01e529172fa8714c08746a91171a36ad77f3516f44093821b8db214a84f86add79f64ce41a8e9c430cb2dc14e343eb6629c5723b919aee43a050f522dce9335361f1e14c7deb046e180bc7fa5d7cfe686f97d07eebd80540412b7ad2c80", 0xd7}], 0x4, &(0x7f0000002c40)}}], 0x3, 0x1) (async) sendmmsg(r1, &(0x7f0000002c80)=[{{&(0x7f0000000140)=@l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff9, 0x1}, 0x80, &(0x7f0000002480)=[{&(0x7f00000001c0)="baa7b2e88eb84339c5731f05880f0bc22e529bbf4af65e30b44383fbc6db6844f9544d68dacd201172952426230fa934bdb3893cbc6282da849b755db9f3944770250320b14a6a3fa88d1d70df1394f945eb6db5b58bc54655fbc555aac8b7286fc369aa1f7269f0ba510d9b178f96ee24b7ac154f7cefd53018a46aa01d5f535bca870035ab1379e9b9d9f731f3944eb68444966d3addd3698109a3c0", 0x9d}, {&(0x7f0000000280)="f091e745f8ed2b188254d5847c1e210f1c7def30a9dede9fded21a093361bc711e859001648080d5ea1a7fff3b3afcb1d3f54b222f6cf976", 0x38}, {&(0x7f00000002c0)="f6bdb4820de903cb7450bd2ebf780823f92f6d442e94c1579a436264ebe1c40862e9788135ee929bb7404e938cd718cdb3b62235a1f071d6e85104578d9b5da35f4ee0ec0a891285386adc793a3d87055cd5ee59453c297bfed79e024381fa08adfdfff2f944c084b7c04695cf3d9ba3d11f69a63e9956373c4cfb73d0fcbf15159db65cc360189f24b4856b337c3d07a97c8cba99bc1ca4a9", 0x99}, {&(0x7f0000000380)="4c0a3f7e141414c822c743a098383efee40de7ded1859324a7c13decc641f120da550a1d356aaa3826172ac5080d3b81caf6b712b740075b04ca744a01a6c2a903b886f6277e9d3b3272e6a230de051e20c3e6bc7fadf9486596ca1e09", 0x5d}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="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", 0x1000}], 0x6, &(0x7f0000000400)=[{0x40, 0x1e, 0x101, "ce895b97d39b7bb2f253ede8f67ffd7f3029ff9fae8bc8578ba350959d506b3b23d8489f92884b78bb0ccbe0c0c939"}], 0x40}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002500)="9635036800ce3336da8485bb5c3ce5732306b705cc21180852da2649aec39e60cf7738476c758e3f066861da872d0e82fd6bffd5bc4106d40a2984df4feb8674b6998c82d7974babc71d43a509bc549f90217d568e7c1e572e53e9414e16d8b6146a499750a882f233a48e3dc08360458ac4385b192765192bc2107d499512efb9fd399d816000e16e9e2d490b2b490151b36a207bc86fa9f15df45ce1f8a0a445dcc99d709c15b0ddddb6f76c94ffba6c7df59d512f95e36373d59ea02de89c0e8d", 0xc2}, {&(0x7f0000002600)="7e76e5aad6b3939095799d36c44e5139c2f8b2118c5fb05cea4192002b194c542d85951c7d0cfefb7f2874546bc84212f9f1d1da7ce891945137d5ce1916b089ce242fe9b2079232b8e61d01464822ac017af1b14b374f79ed55f73961df75d9", 0x60}, {&(0x7f0000002680)="7cefc40b27cd9018a37e2a70dcae8aa4bca41be6dc22dca5bd02a6b48124bc45e727ea1bf3f6102a97668a116d279bdea5cbe08ca245adbf389aa79c99b84544493e37ab207c5c14e451b58f111283b24596491c", 0x54}, {&(0x7f0000002700)="de363089e45ae1aa519543489fbad30b535f8dc8302f97bc0b8ec643", 0x1c}], 0x4, &(0x7f0000002780)=[{0xe8, 0x110, 0x3, "55a08c3bcd2683669c314b11cd4209c33c89a10f4f4be7b60b396769274d8e7e56f7f849bc02c807aba21a386b72a6feb74f464a01fa6ffaf9ebe1642e792afef9b8882e2d4a91ef70931057288648bdcd892e1e68abf3cf02e8ee44652bfbc980f4768ac90b7f9dadc82b586178f4a54ca7bee3f0747566f6615f0ea1a7b50366e01ac0ab11c1f173ec543363c1c27e51fb20ed0ac67b1ce1fb09cec1724cda0ff7c8f42e7cb465f136bdb38062e4867e9303a52d7db8a75f9bce8ae0a05d75622b873cc988b8d0c6f0a074bdb2c0981e6f88e56ebfdc2b"}], 0xe8}}, {{&(0x7f0000002880)=@generic={0x23, "71d04affc719493606452660b5b47b1923978b4048c1eceb10a0c77a438429d26b4cbcd1ee1b58236874f7c9b1722b3ee2db52a6dc97d1e5c99bb950343c67cbc66293af91717b439580908c66b941667541decef18104e43f9c996b54149ce49951754afbc0ad640c5d2d9e221b5bed146927ceefd7cc3a3080f33e3625"}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002900)="6866604cf7854074fa0f5f3d559316b7b2a78d2acf478bd6d85e9e7c003a4f796912ab2b45b398d09a59c690c59177aaeca4c21c8c38a860e857defb5efa1b6c323ad087a93d1cc8b3442657f8895c456652837e07e64781a591cd388526355d139abaeda8bd7b8c5a910ec1997a002a1e80f132a6667940bb073c87e37bafb3ffd77fa9b68e75d08f440e2d368e4df226a5841cf0eb8769e2a69ddc6635168e9b6be02777fc7dc86358e94f0a5f0e91699126", 0xb3}, {&(0x7f00000029c0)="022c3d0dfab062ea0258afbbc1e98775daae3c037ad3b1e7b7a6af8ec7a20428ef613bdefbfd89052f14ea22510fcd146e335577e2dae0e3169f0181a2d393e0b6b8717678bbe829e28faa358b08174bfec2fd0172ae3c93d0e69a1e719ab360ac8d02786556359e4f197fb952304407b3fe7dd615eec24a3c4ae8640c970daae112fa98537e18f4bfc23cdc15552de3612ea9a62568297d63c760023cb876eea247c47cc41bcd825367c403ff4ba96047c0754ade75f76816aad379911c4db6", 0xc0}, {&(0x7f0000002a80)="5df8efdc592512eb0ff3de87d9c93b033a5938a8d085762f1cb87ab3854fe71c6a5406f62abdcaa78c96badaa36be94d682431e00b62934643ca7bf602dc1e25d9", 0x41}, {&(0x7f0000002b00)="4728974a3a581656747db5edd52c6a394858c235db46de81a87a7900c51e22448132b66dc9d7fea8494e5017f05a14202190705dab0f3c1f6ddce877d9a1b5462da0e88d1ddac53c08d77f69e3a2b79dc47b896c420671d2b3054ff739693d759e2680770b99b52f34f139f3bcb9cccb767d1e0a01be376fe1a01e529172fa8714c08746a91171a36ad77f3516f44093821b8db214a84f86add79f64ce41a8e9c430cb2dc14e343eb6629c5723b919aee43a050f522dce9335361f1e14c7deb046e180bc7fa5d7cfe686f97d07eebd80540412b7ad2c80", 0xd7}], 0x4, &(0x7f0000002c40)}}], 0x3, 0x1) [ 1542.893687][T12246] Bluetooth: hci0: Received unexpected HCI Event 0x00 20:26:13 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04033c6dfe7dd0b539c09b8570d4a0d77d7d3cbaaacaea9fbc2a5d0fe5d7fc5899f354b09274585bf2e6c7ea2fb331f6b5ccc04a36af2cdb3ed387399d3540416029ab1454bf0979b4d3da853f35158d649404a1a01c2b442d2b8ee7ac614252720c1a252d44d60e3fad9ede1f962c17eeb943d1fa8b67415c118b4cdd15f696356c53dd9eb4c208e87ca551592248f6add1dd697512"], 0x6) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) [ 1543.126916][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:14 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:14 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04033c6dfe7dd0b539c09b8570d4a0d77d7d3cbaaacaea9fbc2a5d0fe5d7fc5899f354b09274585bf2e6c7ea2fb331f6b5ccc04a36af2cdb3ed387399d3540416029ab1454bf0979b4d3da853f35158d649404a1a01c2b442d2b8ee7ac614252720c1a252d44d60e3fad9ede1f962c17eeb943d1fa8b67415c118b4cdd15f696356c53dd9eb4c208e87ca551592248f6add1dd697512"], 0x6) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) [ 1543.355847][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:14 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04033c6dfe7dd0b539c09b8570d4a0d77d7d3cbaaacaea9fbc2a5d0fe5d7fc5899f354b09274585bf2e6c7ea2fb331f6b5ccc04a36af2cdb3ed387399d3540416029ab1454bf0979b4d3da853f35158d649404a1a01c2b442d2b8ee7ac614252720c1a252d44d60e3fad9ede1f962c17eeb943d1fa8b67415c118b4cdd15f696356c53dd9eb4c208e87ca551592248f6add1dd697512"], 0x6) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) 20:26:14 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040b"], 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9f}, "9ba9cd96ca1e230f2c19b2e807d1bf09d8355ea43cef917846ef914ee29066951c3bc53dc33422f7f7a018f33c184d6c90b65103d963830345b1d048fa033db14d48c9b4b64952fb078b8879a3b06be470fbc545e310b040a486ad28859a5e6663e9324e11138f4527e6d7d2cf2f6907ecfae3ff083f8700f6b3bc34f8e23e66f0c19d050fbf1043ab3357969bd4e327da1a243a2060394960842232a9cdb2"}, 0xa3) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xad}, "36612661087194519c57e4b2a0e63d56e72c6fae1c7103da64626ae913509831f929c68cd037eab3807e8642dfe2aeb9ad28d98c2c98646fa2e5ff7e08c9afef73a1d4670e0a14f31b633a21d684548a3785243721ce894565351c08bc7d99f15376648646682d8b9eea74d674f63ab91d59312d9787111988cdcdc955971c89063c16c3b2996134236462b95f0921f7d1b2f66e3539090c7309e8c98754e909e9350800af233841def5ee7dbc"}, 0xb1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltclass={0x40, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x1, 0x1}, {0xb, 0x3}, {0xfff3, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xff, 0xff}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0xab}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008020}, 0x24000000) [ 1543.441155][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:14 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040b"], 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9f}, "9ba9cd96ca1e230f2c19b2e807d1bf09d8355ea43cef917846ef914ee29066951c3bc53dc33422f7f7a018f33c184d6c90b65103d963830345b1d048fa033db14d48c9b4b64952fb078b8879a3b06be470fbc545e310b040a486ad28859a5e6663e9324e11138f4527e6d7d2cf2f6907ecfae3ff083f8700f6b3bc34f8e23e66f0c19d050fbf1043ab3357969bd4e327da1a243a2060394960842232a9cdb2"}, 0xa3) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xad}, "36612661087194519c57e4b2a0e63d56e72c6fae1c7103da64626ae913509831f929c68cd037eab3807e8642dfe2aeb9ad28d98c2c98646fa2e5ff7e08c9afef73a1d4670e0a14f31b633a21d684548a3785243721ce894565351c08bc7d99f15376648646682d8b9eea74d674f63ab91d59312d9787111988cdcdc955971c89063c16c3b2996134236462b95f0921f7d1b2f66e3539090c7309e8c98754e909e9350800af233841def5ee7dbc"}, 0xb1) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltclass={0x40, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x1, 0x1}, {0xb, 0x3}, {0xfff3, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xff, 0xff}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0xab}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008020}, 0x24000000) [ 1543.484483][T12246] Bluetooth: hci0: unexpected event 0x0b length: 3 < 11 [ 1543.530264][T12246] Bluetooth: hci0: unexpected event 0x0b length: 3 < 11 20:26:14 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040b"], 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9f}, "9ba9cd96ca1e230f2c19b2e807d1bf09d8355ea43cef917846ef914ee29066951c3bc53dc33422f7f7a018f33c184d6c90b65103d963830345b1d048fa033db14d48c9b4b64952fb078b8879a3b06be470fbc545e310b040a486ad28859a5e6663e9324e11138f4527e6d7d2cf2f6907ecfae3ff083f8700f6b3bc34f8e23e66f0c19d050fbf1043ab3357969bd4e327da1a243a2060394960842232a9cdb2"}, 0xa3) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xad}, "36612661087194519c57e4b2a0e63d56e72c6fae1c7103da64626ae913509831f929c68cd037eab3807e8642dfe2aeb9ad28d98c2c98646fa2e5ff7e08c9afef73a1d4670e0a14f31b633a21d684548a3785243721ce894565351c08bc7d99f15376648646682d8b9eea74d674f63ab91d59312d9787111988cdcdc955971c89063c16c3b2996134236462b95f0921f7d1b2f66e3539090c7309e8c98754e909e9350800af233841def5ee7dbc"}, 0xb1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltclass={0x40, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x1, 0x1}, {0xb, 0x3}, {0xfff3, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xff, 0xff}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0xab}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008020}, 0x24000000) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040b"], 0x6) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) (async) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9f}, "9ba9cd96ca1e230f2c19b2e807d1bf09d8355ea43cef917846ef914ee29066951c3bc53dc33422f7f7a018f33c184d6c90b65103d963830345b1d048fa033db14d48c9b4b64952fb078b8879a3b06be470fbc545e310b040a486ad28859a5e6663e9324e11138f4527e6d7d2cf2f6907ecfae3ff083f8700f6b3bc34f8e23e66f0c19d050fbf1043ab3357969bd4e327da1a243a2060394960842232a9cdb2"}, 0xa3) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xad}, "36612661087194519c57e4b2a0e63d56e72c6fae1c7103da64626ae913509831f929c68cd037eab3807e8642dfe2aeb9ad28d98c2c98646fa2e5ff7e08c9afef73a1d4670e0a14f31b633a21d684548a3785243721ce894565351c08bc7d99f15376648646682d8b9eea74d674f63ab91d59312d9787111988cdcdc955971c89063c16c3b2996134236462b95f0921f7d1b2f66e3539090c7309e8c98754e909e9350800af233841def5ee7dbc"}, 0xb1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltclass={0x40, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x1, 0x1}, {0xb, 0x3}, {0xfff3, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xff, 0xff}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0xab}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008020}, 0x24000000) (async) 20:26:14 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x1, &(0x7f0000000340)={0x0, 0xdc5d, 0x10, 0x1, 0x272}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000880)=0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x6, 0x1, 0x3f}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000700)=""/140, 0x8c}], 0x9) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) [ 1543.652861][T12246] Bluetooth: hci0: unexpected event 0x0b length: 3 < 11 [ 1543.669321][T12246] Bluetooth: hci0: unexpected event 0x0b length: 3 < 11 20:26:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:14 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0bb6e215180b2baf28c10a71c4a82c0ac7bf4f1deafe34b2ad622e6ebfd245d247179f5d3126e35e8918e5e3f4b56e0ddbefa882f55057e608012d55bddefde53302421fe33ef936c42e87f624b893bda39037c52bc2efadd3d9ab837111b6151f428dd2e8e314b42e00b7c3c0d80e5fa5a88e06bcb1c6b14da91f1475c84c37c30c368245e0f6b3402c95335246197e9f9bf8814a96fdfadb0affebe1b061e98b8a83"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 20:26:14 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:14 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x1, &(0x7f0000000340)={0x0, 0xdc5d, 0x10, 0x1, 0x272}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000880)) (async) r1 = syz_io_uring_setup(0x1, &(0x7f0000000340)={0x0, 0xdc5d, 0x10, 0x1, 0x272}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000880)=0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x6, 0x1, 0x3f}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x6, 0x1, 0x3f}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000700)=""/140, 0x8c}], 0x9) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) 20:26:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:14 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0bb6e215180b2baf28c10a71c4a82c0ac7bf4f1deafe34b2ad622e6ebfd245d247179f5d3126e35e8918e5e3f4b56e0ddbefa882f55057e608012d55bddefde53302421fe33ef936c42e87f624b893bda39037c52bc2efadd3d9ab837111b6151f428dd2e8e314b42e00b7c3c0d80e5fa5a88e06bcb1c6b14da91f1475c84c37c30c368245e0f6b3402c95335246197e9f9bf8814a96fdfadb0affebe1b061e98b8a83"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0bb6e215180b2baf28c10a71c4a82c0ac7bf4f1deafe34b2ad622e6ebfd245d247179f5d3126e35e8918e5e3f4b56e0ddbefa882f55057e608012d55bddefde53302421fe33ef936c42e87f624b893bda39037c52bc2efadd3d9ab837111b6151f428dd2e8e314b42e00b7c3c0d80e5fa5a88e06bcb1c6b14da91f1475c84c37c30c368245e0f6b3402c95335246197e9f9bf8814a96fdfadb0affebe1b061e98b8a83"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 20:26:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:15 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0bb6e215180b2baf28c10a71c4a82c0ac7bf4f1deafe34b2ad622e6ebfd245d247179f5d3126e35e8918e5e3f4b56e0ddbefa882f55057e608012d55bddefde53302421fe33ef936c42e87f624b893bda39037c52bc2efadd3d9ab837111b6151f428dd2e8e314b42e00b7c3c0d80e5fa5a88e06bcb1c6b14da91f1475c84c37c30c368245e0f6b3402c95335246197e9f9bf8814a96fdfadb0affebe1b061e98b8a83"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 20:26:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:15 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:15 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x1, &(0x7f0000000340)={0x0, 0xdc5d, 0x10, 0x1, 0x272}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000880)=0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x6, 0x1, 0x3f}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000700)=""/140, 0x8c}], 0x9) (async) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000700)=""/140, 0x8c}], 0x9) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) 20:26:15 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c99012000e00050017000a0040000000010085baff0fb8e078c78a4cef019685d0ce32789de23816a66e7c11b08b401ca1a22bf252bd905d44e7c670d1c5ceb14dfca03c0ab93ae6e944923b724f8bf4dfee10ee437315ec0f34"], 0x17) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xce}, "b7e08ef8c136eb986e6cc0910412d92f9eda0a5f187ccfae2ab676bdaadaafaefdfe020f95f53e33a6663c89af958c5f6daa49b4eccccec03fd807608e199b59b761cb59e2df1fc1af23320129ee06d1ac45423c074c3adab4f48ef6267a8025c5fc1b36b4a33067623d4b4ca24534c87f8b6470d08bc9adf47712e5b3ad4a4d8a96e22bbf45a7e9b81b2b668f0e1ce71edd05b5398e1977034238386fc0ac0c7dc68cc63fc6dae528eeb1ce99002ea64c0384f220e5c0667a59fbb47e65cb5b9a8fc9bb87a5575b944818c74324"}, 0xd2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc8, 0x3, 0x6, 0x3}}}}, 0xd) [ 1544.497778][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:15 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x4}, 0x8, 0x0) signalfd(r3, &(0x7f00000000c0)={[0x12c]}, 0x8) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:15 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c99012000e00050017000a0040000000010085baff0fb8e078c78a4cef019685d0ce32789de23816a66e7c11b08b401ca1a22bf252bd905d44e7c670d1c5ceb14dfca03c0ab93ae6e944923b724f8bf4dfee10ee437315ec0f34"], 0x17) (rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xce}, "b7e08ef8c136eb986e6cc0910412d92f9eda0a5f187ccfae2ab676bdaadaafaefdfe020f95f53e33a6663c89af958c5f6daa49b4eccccec03fd807608e199b59b761cb59e2df1fc1af23320129ee06d1ac45423c074c3adab4f48ef6267a8025c5fc1b36b4a33067623d4b4ca24534c87f8b6470d08bc9adf47712e5b3ad4a4d8a96e22bbf45a7e9b81b2b668f0e1ce71edd05b5398e1977034238386fc0ac0c7dc68cc63fc6dae528eeb1ce99002ea64c0384f220e5c0667a59fbb47e65cb5b9a8fc9bb87a5575b944818c74324"}, 0xd2) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc8, 0x3, 0x6, 0x3}}}}, 0xd) 20:26:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:15 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) [ 1544.709595][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.717005][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.740984][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.748109][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.755213][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.763252][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.771188][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.778215][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.785419][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.792474][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.799710][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.806721][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.813798][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.821179][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.828171][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.836225][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.843331][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.850386][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.857342][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.864439][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.872165][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.880542][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.887841][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.894843][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.901855][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.908841][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.915794][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.922793][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.929839][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.936795][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.944674][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1544.951659][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:15 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x4}, 0x8, 0x0) signalfd(r3, &(0x7f00000000c0)={[0x12c]}, 0x8) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) [ 1544.958686][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:16 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c99012000e00050017000a0040000000010085baff0fb8e078c78a4cef019685d0ce32789de23816a66e7c11b08b401ca1a22bf252bd905d44e7c670d1c5ceb14dfca03c0ab93ae6e944923b724f8bf4dfee10ee437315ec0f34"], 0x17) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xce}, "b7e08ef8c136eb986e6cc0910412d92f9eda0a5f187ccfae2ab676bdaadaafaefdfe020f95f53e33a6663c89af958c5f6daa49b4eccccec03fd807608e199b59b761cb59e2df1fc1af23320129ee06d1ac45423c074c3adab4f48ef6267a8025c5fc1b36b4a33067623d4b4ca24534c87f8b6470d08bc9adf47712e5b3ad4a4d8a96e22bbf45a7e9b81b2b668f0e1ce71edd05b5398e1977034238386fc0ac0c7dc68cc63fc6dae528eeb1ce99002ea64c0384f220e5c0667a59fbb47e65cb5b9a8fc9bb87a5575b944818c74324"}, 0xd2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc8, 0x3, 0x6, 0x3}}}}, 0xd) 20:26:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:16 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x4}, 0x8, 0x0) signalfd(r3, &(0x7f00000000c0)={[0x12c]}, 0x8) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) landlock_create_ruleset(&(0x7f0000000080)={0x4}, 0x8, 0x0) (async) signalfd(r3, &(0x7f00000000c0)={[0x12c]}, 0x8) (async) dup(r0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) 20:26:16 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0428"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x7e}, @l2cap_cid_signaling={{0x7a}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0xffe0, 0x200, 0x1}}, @l2cap_conf_req={{0x4, 0x20, 0x48}, {0x4, 0x100, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x61, 0x1, 0xffff, 0x8000, 0x101, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x43, 0x2, 0x8000, 0x7fffffff, 0xffffffff, 0x81}}, @l2cap_conf_efs={0x6, 0x10, {0xb3, 0x0, 0x8, 0x3, 0x4c, 0x4}}, @l2cap_conf_mtu={0x1, 0x2, 0x8000}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x5, 0x4, 0x9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x8001, 0xba}}, @l2cap_create_chan_req={{0xc, 0x5b, 0x5}, {0x400, 0x0, 0x15}}]}}, 0x83) [ 1545.254951][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:16 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r3, 0x0, 0x0) io_uring_enter(r3, 0x10c, 0xd52e, 0xf, &(0x7f0000000080)={[0x200]}, 0x8) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:16 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0428"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x7e}, @l2cap_cid_signaling={{0x7a}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0xffe0, 0x200, 0x1}}, @l2cap_conf_req={{0x4, 0x20, 0x48}, {0x4, 0x100, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x61, 0x1, 0xffff, 0x8000, 0x101, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x43, 0x2, 0x8000, 0x7fffffff, 0xffffffff, 0x81}}, @l2cap_conf_efs={0x6, 0x10, {0xb3, 0x0, 0x8, 0x3, 0x4c, 0x4}}, @l2cap_conf_mtu={0x1, 0x2, 0x8000}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x5, 0x4, 0x9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x8001, 0xba}}, @l2cap_create_chan_req={{0xc, 0x5b, 0x5}, {0x400, 0x0, 0x15}}]}}, 0x83) 20:26:16 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:16 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0428"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x7e}, @l2cap_cid_signaling={{0x7a}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0xffe0, 0x200, 0x1}}, @l2cap_conf_req={{0x4, 0x20, 0x48}, {0x4, 0x100, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x61, 0x1, 0xffff, 0x8000, 0x101, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x43, 0x2, 0x8000, 0x7fffffff, 0xffffffff, 0x81}}, @l2cap_conf_efs={0x6, 0x10, {0xb3, 0x0, 0x8, 0x3, 0x4c, 0x4}}, @l2cap_conf_mtu={0x1, 0x2, 0x8000}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x5, 0x4, 0x9, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x8001, 0xba}}, @l2cap_create_chan_req={{0xc, 0x5b, 0x5}, {0x400, 0x0, 0x15}}]}}, 0x83) 20:26:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) [ 1545.839710][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.846090][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 20:26:16 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xe5f, 0x80, 0x3, 0xa8}}}, 0xa) 20:26:16 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xe5f, 0x80, 0x3, 0xa8}}}, 0xa) [ 1546.017511][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1546.039211][ T5017] Bluetooth: hci0: Malformed Event: 0x02 [ 1546.190919][ T5017] Bluetooth: hci0: Malformed Event: 0x02 [ 1546.196757][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:17 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xe5f, 0x80, 0x3, 0xa8}}}, 0xa) 20:26:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:17 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r3, 0x0, 0x0) io_uring_enter(r3, 0x10c, 0xd52e, 0xf, &(0x7f0000000080)={[0x200]}, 0x8) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:17 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffa}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x0, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00'], 0x6) [ 1546.374724][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1546.382143][ T5017] Bluetooth: hci0: Malformed Event: 0x02 20:26:17 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffa}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x0, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00'], 0x6) (rerun: 32) 20:26:17 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffa}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x0, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00'], 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffa}}, './file0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x0, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00'], 0x6) (async) 20:26:17 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:17 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1, 0xc8, 0x8d}}}, 0x8) 20:26:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:17 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1, 0xc8, 0x8d}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1, 0xc8, 0x8d}}}, 0x8) [ 1546.900757][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:17 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1, 0xc8, 0x8d}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1, 0xc8, 0x8d}}}, 0x8) [ 1546.977802][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:17 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f00000001c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1, &(0x7f00000003c0)=""/247, 0xf7}, 0x40010040) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc2000, 0x0) sendto$inet(r2, &(0x7f00000005c0)="e6c49597e5a53aa75537f88633243f59c4779fb70c18035882c634965e1ae4d48965b76a9a56477940763d0198be883f28eb622c741599bfd7037acb72efb66ca09a4101a1f693980c0fd2c82ae2ffad9bc5a1366c82361c16b9b5ee301e99e847ff1c90594d2862554c2a0ee97b2cab0b094199a264603f033fda3e6572170ec883e2e1c07031520248a25a85211bb36a036bb799be86c5beefcb87147d4e7d10726fa4d5967a26dfa49121fb03e6b03ebcae4ccecbccae6ccc2f31aa9798da4c4f598b83fe67c878", 0xc9, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f00000006c0)=@generic, 0x80, &(0x7f0000000180)=[{0xfffffffffffffffe}, {&(0x7f0000002100)=""/199, 0xc7}], 0x2, &(0x7f0000000800)=""/144, 0x90}, 0xde78}, {{&(0x7f00000008c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000940)=""/117, 0x75}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/42, 0x2a}, {&(0x7f0000000740)=""/63, 0x3f}, {&(0x7f0000001a40)=""/141, 0x8d}], 0x5, &(0x7f0000001b80)=""/214, 0xd6}, 0x4}, {{&(0x7f0000001c80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002080)=[{&(0x7f0000002b00)=""/10, 0xa}, {&(0x7f0000001d40)=""/90, 0x5a}, {&(0x7f0000001dc0)=""/91, 0x5b}, {&(0x7f0000001e40)=""/42, 0x2a}, {&(0x7f0000001e80)=""/40, 0x28}, {&(0x7f0000001ec0)=""/174, 0xae}, {&(0x7f0000001f80)=""/255, 0xff}], 0x7, &(0x7f0000002b40)=""/222, 0xde}, 0xffffffab}, {{&(0x7f0000002200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002280)=""/196, 0xc4}, {&(0x7f0000002380)=""/36, 0x24}, {&(0x7f00000023c0)=""/83, 0x53}], 0x3, &(0x7f0000002480)=""/48, 0x30}, 0x1}, {{&(0x7f00000024c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002540)=""/183, 0xb7}], 0x1, &(0x7f0000002640)=""/106, 0x6a}, 0x3}, {{&(0x7f00000026c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002740)=""/38, 0x26}, {&(0x7f0000002780)=""/243, 0xf3}], 0x2, &(0x7f00000028c0)=""/107, 0x6b}, 0x5}], 0x6, 0x100, &(0x7f0000002ac0)) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYBLOB="6fa47f3ad319c9e8b4d5add78f7653ec217b8249278aa133922b50700a91e6419bc27023b1318c50d281e58b13300b0593531acde078916aef17ab6c901e42a2e54ea3430b8e80df113392f93be7811be729593a6a762b8d587280856d3f8cbaf6ac47bbadf70f8273c8e429c7c87b09b28377d6ecc72d4c153712516535df279c33fd1dbeddbbc30309a48aad94315925268ff9f47cfdae842fea3f07477c1889747e07a7b6c99f0df0d40ae0e225bef7b4e94a754e48fb29e7ade9fc74b5a734d3a9aaf20fb77b192e28", @ANYRES16=r0], 0x6) syz_emit_vhci(0x0, 0x0) [ 1547.057167][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:18 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r3, 0x0, 0x0) io_uring_enter(r3, 0x10c, 0xd52e, 0xf, &(0x7f0000000080)={[0x200]}, 0x8) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:18 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) recvmsg(r1, &(0x7f0000000240)={&(0x7f00000001c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1, &(0x7f00000003c0)=""/247, 0xf7}, 0x40010040) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc2000, 0x0) sendto$inet(r2, &(0x7f00000005c0)="e6c49597e5a53aa75537f88633243f59c4779fb70c18035882c634965e1ae4d48965b76a9a56477940763d0198be883f28eb622c741599bfd7037acb72efb66ca09a4101a1f693980c0fd2c82ae2ffad9bc5a1366c82361c16b9b5ee301e99e847ff1c90594d2862554c2a0ee97b2cab0b094199a264603f033fda3e6572170ec883e2e1c07031520248a25a85211bb36a036bb799be86c5beefcb87147d4e7d10726fa4d5967a26dfa49121fb03e6b03ebcae4ccecbccae6ccc2f31aa9798da4c4f598b83fe67c878", 0xc9, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f00000006c0)=@generic, 0x80, &(0x7f0000000180)=[{0xfffffffffffffffe}, {&(0x7f0000002100)=""/199, 0xc7}], 0x2, &(0x7f0000000800)=""/144, 0x90}, 0xde78}, {{&(0x7f00000008c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000940)=""/117, 0x75}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/42, 0x2a}, {&(0x7f0000000740)=""/63, 0x3f}, {&(0x7f0000001a40)=""/141, 0x8d}], 0x5, &(0x7f0000001b80)=""/214, 0xd6}, 0x4}, {{&(0x7f0000001c80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002080)=[{&(0x7f0000002b00)=""/10, 0xa}, {&(0x7f0000001d40)=""/90, 0x5a}, {&(0x7f0000001dc0)=""/91, 0x5b}, {&(0x7f0000001e40)=""/42, 0x2a}, {&(0x7f0000001e80)=""/40, 0x28}, {&(0x7f0000001ec0)=""/174, 0xae}, {&(0x7f0000001f80)=""/255, 0xff}], 0x7, &(0x7f0000002b40)=""/222, 0xde}, 0xffffffab}, {{&(0x7f0000002200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002280)=""/196, 0xc4}, {&(0x7f0000002380)=""/36, 0x24}, {&(0x7f00000023c0)=""/83, 0x53}], 0x3, &(0x7f0000002480)=""/48, 0x30}, 0x1}, {{&(0x7f00000024c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002540)=""/183, 0xb7}], 0x1, &(0x7f0000002640)=""/106, 0x6a}, 0x3}, {{&(0x7f00000026c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002740)=""/38, 0x26}, {&(0x7f0000002780)=""/243, 0xf3}], 0x2, &(0x7f00000028c0)=""/107, 0x6b}, 0x5}], 0x6, 0x100, &(0x7f0000002ac0)) (async) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYBLOB="6fa47f3ad319c9e8b4d5add78f7653ec217b8249278aa133922b50700a91e6419bc27023b1318c50d281e58b13300b0593531acde078916aef17ab6c901e42a2e54ea3430b8e80df113392f93be7811be729593a6a762b8d587280856d3f8cbaf6ac47bbadf70f8273c8e429c7c87b09b28377d6ecc72d4c153712516535df279c33fd1dbeddbbc30309a48aad94315925268ff9f47cfdae842fea3f07477c1889747e07a7b6c99f0df0d40ae0e225bef7b4e94a754e48fb29e7ade9fc74b5a734d3a9aaf20fb77b192e28", @ANYRES16=r0], 0x6) (async) syz_emit_vhci(0x0, 0x0) 20:26:18 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f00000001c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1, &(0x7f00000003c0)=""/247, 0xf7}, 0x40010040) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc2000, 0x0) sendto$inet(r2, &(0x7f00000005c0)="e6c49597e5a53aa75537f88633243f59c4779fb70c18035882c634965e1ae4d48965b76a9a56477940763d0198be883f28eb622c741599bfd7037acb72efb66ca09a4101a1f693980c0fd2c82ae2ffad9bc5a1366c82361c16b9b5ee301e99e847ff1c90594d2862554c2a0ee97b2cab0b094199a264603f033fda3e6572170ec883e2e1c07031520248a25a85211bb36a036bb799be86c5beefcb87147d4e7d10726fa4d5967a26dfa49121fb03e6b03ebcae4ccecbccae6ccc2f31aa9798da4c4f598b83fe67c878", 0xc9, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f00000006c0)=@generic, 0x80, &(0x7f0000000180)=[{0xfffffffffffffffe}, {&(0x7f0000002100)=""/199, 0xc7}], 0x2, &(0x7f0000000800)=""/144, 0x90}, 0xde78}, {{&(0x7f00000008c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000940)=""/117, 0x75}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/42, 0x2a}, {&(0x7f0000000740)=""/63, 0x3f}, {&(0x7f0000001a40)=""/141, 0x8d}], 0x5, &(0x7f0000001b80)=""/214, 0xd6}, 0x4}, {{&(0x7f0000001c80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002080)=[{&(0x7f0000002b00)=""/10, 0xa}, {&(0x7f0000001d40)=""/90, 0x5a}, {&(0x7f0000001dc0)=""/91, 0x5b}, {&(0x7f0000001e40)=""/42, 0x2a}, {&(0x7f0000001e80)=""/40, 0x28}, {&(0x7f0000001ec0)=""/174, 0xae}, {&(0x7f0000001f80)=""/255, 0xff}], 0x7, &(0x7f0000002b40)=""/222, 0xde}, 0xffffffab}, {{&(0x7f0000002200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002280)=""/196, 0xc4}, {&(0x7f0000002380)=""/36, 0x24}, {&(0x7f00000023c0)=""/83, 0x53}], 0x3, &(0x7f0000002480)=""/48, 0x30}, 0x1}, {{&(0x7f00000024c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002540)=""/183, 0xb7}], 0x1, &(0x7f0000002640)=""/106, 0x6a}, 0x3}, {{&(0x7f00000026c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002740)=""/38, 0x26}, {&(0x7f0000002780)=""/243, 0xf3}], 0x2, &(0x7f00000028c0)=""/107, 0x6b}, 0x5}], 0x6, 0x100, &(0x7f0000002ac0)) (async) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYBLOB="6fa47f3ad319c9e8b4d5add78f7653ec217b8249278aa133922b50700a91e6419bc27023b1318c50d281e58b13300b0593531acde078916aef17ab6c901e42a2e54ea3430b8e80df113392f93be7811be729593a6a762b8d587280856d3f8cbaf6ac47bbadf70f8273c8e429c7c87b09b28377d6ecc72d4c153712516535df279c33fd1dbeddbbc30309a48aad94315925268ff9f47cfdae842fea3f07477c1889747e07a7b6c99f0df0d40ae0e225bef7b4e94a754e48fb29e7ade9fc74b5a734d3a9aaf20fb77b192e28", @ANYRES16=r0], 0x6) (async) syz_emit_vhci(0x0, 0x0) [ 1547.242825][T12246] Bluetooth: hci0: SCO packet for unknown connection handle 1135 20:26:18 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x3, 0x64, 0x1}}}, 0x8) [ 1547.475510][ T5017] Bluetooth: hci0: SCO packet for unknown connection handle 1135 [ 1547.551214][ T5017] Bluetooth: hci0: SCO packet for unknown connection handle 1135 [ 1547.710394][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:18 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:18 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x3, 0x64, 0x1}}}, 0x8) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x3, 0x64, 0x1}}}, 0x8) (async) 20:26:18 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x3, 0x64, 0x1}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x3, 0x64, 0x1}}}, 0x8) [ 1547.898493][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1547.910337][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:18 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9101c00180006050400e40e0180100604000500d09816ca90db4388a34c"], 0x21) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x20}, @l2cap_cid_signaling={{}, [@l2cap_info_req={{0xa, 0x6, 0x18}, {0x7}}, @l2cap_conf_rsp={{0x5, 0xc1}, {0x9, 0x1, 0xfff8, [@l2cap_conf_efs={0x6, 0x0, {0x7e, 0x0, 0x4, 0x0, 0x3ff, 0x1000}}, @l2cap_conf_flushto={0x2, 0x0, 0x401}, @l2cap_conf_fcs, @l2cap_conf_mtu={0x1, 0x0, 0x2}, @l2cap_conf_flushto={0x2, 0x0, 0x1}, @l2cap_conf_efs={0x6, 0x0, {0x1, 0x2, 0x6, 0x4, 0x3, 0x7}}, @l2cap_conf_rfc={0x4, 0x0, {0x3, 0x29, 0xf4, 0x3, 0x0, 0x5}}]}}, @l2cap_move_chan_req={{0xe, 0x8}, {0x7ff, 0x2}}]}}, 0xfffffffffffffcda) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x7f, 0x4}, {0x337}}}}, 0x11) [ 1547.978408][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1548.084771][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1548.096978][ T5017] Bluetooth: Unexpected start frame (len 12) [ 1548.103072][ T5017] Bluetooth: Wrong link type (-57) 20:26:19 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9101c00180006050400e40e0180100604000500d09816ca90db4388a34c"], 0x21) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x20}, @l2cap_cid_signaling={{}, [@l2cap_info_req={{0xa, 0x6, 0x18}, {0x7}}, @l2cap_conf_rsp={{0x5, 0xc1}, {0x9, 0x1, 0xfff8, [@l2cap_conf_efs={0x6, 0x0, {0x7e, 0x0, 0x4, 0x0, 0x3ff, 0x1000}}, @l2cap_conf_flushto={0x2, 0x0, 0x401}, @l2cap_conf_fcs, @l2cap_conf_mtu={0x1, 0x0, 0x2}, @l2cap_conf_flushto={0x2, 0x0, 0x1}, @l2cap_conf_efs={0x6, 0x0, {0x1, 0x2, 0x6, 0x4, 0x3, 0x7}}, @l2cap_conf_rfc={0x4, 0x0, {0x3, 0x29, 0xf4, 0x3, 0x0, 0x5}}]}}, @l2cap_move_chan_req={{0xe, 0x8}, {0x7ff, 0x2}}]}}, 0xfffffffffffffcda) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x7f, 0x4}, {0x337}}}}, 0x11) [ 1548.176946][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1548.206831][ T5017] Bluetooth: Unexpected continuation frame (len 28) 20:26:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:19 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x110, r4, 0x0) syz_io_uring_setup(0x4bc3, &(0x7f0000000080)={0x0, 0x86b3, 0x100, 0x1, 0x263, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r7 = dup3(r4, r1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, r7, 0x80, &(0x7f0000000240)=@can, 0x0, 0x0, 0x1}, 0x1f) [ 1548.229022][ T5017] Bluetooth: Wrong link type (-57) 20:26:19 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9101c00180006050400e40e0180100604000500d09816ca90db4388a34c"], 0x21) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x20}, @l2cap_cid_signaling={{}, [@l2cap_info_req={{0xa, 0x6, 0x18}, {0x7}}, @l2cap_conf_rsp={{0x5, 0xc1}, {0x9, 0x1, 0xfff8, [@l2cap_conf_efs={0x6, 0x0, {0x7e, 0x0, 0x4, 0x0, 0x3ff, 0x1000}}, @l2cap_conf_flushto={0x2, 0x0, 0x401}, @l2cap_conf_fcs, @l2cap_conf_mtu={0x1, 0x0, 0x2}, @l2cap_conf_flushto={0x2, 0x0, 0x1}, @l2cap_conf_efs={0x6, 0x0, {0x1, 0x2, 0x6, 0x4, 0x3, 0x7}}, @l2cap_conf_rfc={0x4, 0x0, {0x3, 0x29, 0xf4, 0x3, 0x0, 0x5}}]}}, @l2cap_move_chan_req={{0xe, 0x8}, {0x7ff, 0x2}}]}}, 0xfffffffffffffcda) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x7f, 0x4}, {0x337}}}}, 0x11) [ 1548.299343][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1548.306785][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1548.324350][T12246] Bluetooth: Unexpected continuation frame (len 28) [ 1548.331295][T12246] Bluetooth: Wrong link type (-57) [ 1548.336569][T12246] Bluetooth: hci0: link tx timeout [ 1548.342955][T12246] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa 20:26:19 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c90037da10b2f9adf05ab12a108ef7317b6f6ff87630298849747a0aeeef1f5ced1f8943e611f3248f5187fefa53fda6f608b0f5cc6194686532"], 0x3b) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_reconf_req={{0x19, 0x8, 0x14}, {0x7, 0x37, [0x2, 0x99af, 0x9, 0x7, 0x8000, 0xfff9, 0x2, 0x2]}}}}, 0x21) 20:26:19 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async, rerun: 32) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x110, r4, 0x0) (async) syz_io_uring_setup(0x4bc3, &(0x7f0000000080)={0x0, 0x86b3, 0x100, 0x1, 0x263, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r7 = dup3(r4, r1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, r7, 0x80, &(0x7f0000000240)=@can, 0x0, 0x0, 0x1}, 0x1f) 20:26:19 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) [ 1548.538293][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1548.553162][T12246] Bluetooth: hci0: link tx timeout [ 1548.560001][T12246] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa 20:26:19 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x110, r4, 0x0) syz_io_uring_setup(0x4bc3, &(0x7f0000000080)={0x0, 0x86b3, 0x100, 0x1, 0x263, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r7 = dup3(r4, r1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, r7, 0x80, &(0x7f0000000240)=@can, 0x0, 0x0, 0x1}, 0x1f) 20:26:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:19 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c90037da10b2f9adf05ab12a108ef7317b6f6ff87630298849747a0aeeef1f5ced1f8943e611f3248f5187fefa53fda6f608b0f5cc6194686532"], 0x3b) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_reconf_req={{0x19, 0x8, 0x14}, {0x7, 0x37, [0x2, 0x99af, 0x9, 0x7, 0x8000, 0xfff9, 0x2, 0x2]}}}}, 0x21) 20:26:19 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:19 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) r5 = socket$inet6(0xa, 0x80000, 0x7) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000800)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/166, 0xa6}, {&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000140)=""/51, 0x33}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000680)=""/8, 0x8}, {&(0x7f00000006c0)=""/65, 0x41}], 0x8, &(0x7f00000007c0)=""/23, 0x17}, 0xc77b}], 0x1, 0x0, &(0x7f0000000880)={r6, r7+10000000}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) recvmmsg(r4, &(0x7f0000009ac0)=[{{&(0x7f00000008c0)=@un=@abs, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000940)=""/101, 0x65}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}, {&(0x7f0000001ac0)=""/12, 0xc}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/153, 0x99}], 0x6, &(0x7f0000002c40)=""/108, 0x6c}, 0x8}, {{&(0x7f0000002cc0)=@xdp, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/200, 0xc8}], 0x1, &(0x7f0000002e80)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000003e80)=@ethernet, 0x80, &(0x7f0000004180)=[{&(0x7f0000003f00)=""/130, 0x82}, {&(0x7f0000003fc0)=""/80, 0x50}, {&(0x7f0000004040)=""/25, 0x19}, {&(0x7f0000004080)=""/230, 0xe6}], 0x4}, 0x5b2}, {{&(0x7f00000041c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000006700)=[{&(0x7f0000004240)=""/80, 0x50}, {&(0x7f00000042c0)=""/141, 0x8d}, {&(0x7f0000004380)=""/235, 0xeb}, {&(0x7f0000004480)=""/174, 0xae}, {&(0x7f0000004540)=""/63, 0x3f}, {&(0x7f0000004580)=""/75, 0x4b}, {&(0x7f0000004600)=""/160, 0xa0}, {&(0x7f00000046c0)=""/16, 0x10}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/4096, 0x1000}], 0xa}, 0x8}, {{&(0x7f00000067c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000006880)=[{&(0x7f0000006840)=""/31, 0x1f}], 0x1, &(0x7f00000068c0)=""/4096, 0x1000}, 0xfff}, {{0x0, 0x0, &(0x7f0000009a00)=[{&(0x7f00000078c0)=""/4096, 0x1000}, {&(0x7f00000088c0)=""/211, 0xd3}, {&(0x7f00000089c0)=""/4096, 0x1000}, {&(0x7f00000099c0)=""/18, 0x12}], 0x4, &(0x7f0000009a40)=""/110, 0x6e}, 0x8}], 0x6, 0x12000, &(0x7f0000009c40)={0x0, 0x989680}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) sendfile(r8, r9, 0x0, 0x3) 20:26:19 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c90037da10b2f9adf05ab12a108ef7317b6f6ff87630298849747a0aeeef1f5ced1f8943e611f3248f5187fefa53fda6f608b0f5cc6194686532"], 0x3b) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_reconf_req={{0x19, 0x8, 0x14}, {0x7, 0x37, [0x2, 0x99af, 0x9, 0x7, 0x8000, 0xfff9, 0x2, 0x2]}}}}, 0x21) [ 1548.853245][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1548.872340][T12246] Bluetooth: hci0: link tx timeout [ 1548.877523][T12246] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1549.012372][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1549.019897][T12246] Bluetooth: hci0: link tx timeout [ 1549.025050][T12246] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa 20:26:20 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) socket(0x8, 0xa, 0x5) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r1], 0xfffffffffffffff7) 20:26:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:20 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) dup(r0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) r5 = socket$inet6(0xa, 0x80000, 0x7) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000800)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/166, 0xa6}, {&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000140)=""/51, 0x33}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000680)=""/8, 0x8}, {&(0x7f00000006c0)=""/65, 0x41}], 0x8, &(0x7f00000007c0)=""/23, 0x17}, 0xc77b}], 0x1, 0x0, &(0x7f0000000880)={r6, r7+10000000}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) recvmmsg(r4, &(0x7f0000009ac0)=[{{&(0x7f00000008c0)=@un=@abs, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000940)=""/101, 0x65}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}, {&(0x7f0000001ac0)=""/12, 0xc}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/153, 0x99}], 0x6, &(0x7f0000002c40)=""/108, 0x6c}, 0x8}, {{&(0x7f0000002cc0)=@xdp, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/200, 0xc8}], 0x1, &(0x7f0000002e80)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000003e80)=@ethernet, 0x80, &(0x7f0000004180)=[{&(0x7f0000003f00)=""/130, 0x82}, {&(0x7f0000003fc0)=""/80, 0x50}, {&(0x7f0000004040)=""/25, 0x19}, {&(0x7f0000004080)=""/230, 0xe6}], 0x4}, 0x5b2}, {{&(0x7f00000041c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000006700)=[{&(0x7f0000004240)=""/80, 0x50}, {&(0x7f00000042c0)=""/141, 0x8d}, {&(0x7f0000004380)=""/235, 0xeb}, {&(0x7f0000004480)=""/174, 0xae}, {&(0x7f0000004540)=""/63, 0x3f}, {&(0x7f0000004580)=""/75, 0x4b}, {&(0x7f0000004600)=""/160, 0xa0}, {&(0x7f00000046c0)=""/16, 0x10}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/4096, 0x1000}], 0xa}, 0x8}, {{&(0x7f00000067c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000006880)=[{&(0x7f0000006840)=""/31, 0x1f}], 0x1, &(0x7f00000068c0)=""/4096, 0x1000}, 0xfff}, {{0x0, 0x0, &(0x7f0000009a00)=[{&(0x7f00000078c0)=""/4096, 0x1000}, {&(0x7f00000088c0)=""/211, 0xd3}, {&(0x7f00000089c0)=""/4096, 0x1000}, {&(0x7f00000099c0)=""/18, 0x12}], 0x4, &(0x7f0000009a40)=""/110, 0x6e}, 0x8}], 0x6, 0x12000, &(0x7f0000009c40)={0x0, 0x989680}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) sendfile(r8, r9, 0x0, 0x3) 20:26:20 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) socket(0x8, 0xa, 0x5) (async) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r1], 0xfffffffffffffff7) 20:26:20 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) socket(0x8, 0xa, 0x5) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r1], 0xfffffffffffffff7) socket(0x2, 0x3, 0x100000001) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) socket(0x2, 0x3, 0x100000001) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) socket(0x8, 0xa, 0x5) (async) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r1], 0xfffffffffffffff7) (async) 20:26:20 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:20 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x8, 0xc8, "d049d6061030a0f5"}}}, 0xe) 20:26:20 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) r5 = socket$inet6(0xa, 0x80000, 0x7) (async) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000800)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/166, 0xa6}, {&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000140)=""/51, 0x33}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000680)=""/8, 0x8}, {&(0x7f00000006c0)=""/65, 0x41}], 0x8, &(0x7f00000007c0)=""/23, 0x17}, 0xc77b}], 0x1, 0x0, &(0x7f0000000880)={r6, r7+10000000}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) (async) recvmmsg(r4, &(0x7f0000009ac0)=[{{&(0x7f00000008c0)=@un=@abs, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000940)=""/101, 0x65}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/232, 0xe8}, {&(0x7f0000001ac0)=""/12, 0xc}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/153, 0x99}], 0x6, &(0x7f0000002c40)=""/108, 0x6c}, 0x8}, {{&(0x7f0000002cc0)=@xdp, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/200, 0xc8}], 0x1, &(0x7f0000002e80)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000003e80)=@ethernet, 0x80, &(0x7f0000004180)=[{&(0x7f0000003f00)=""/130, 0x82}, {&(0x7f0000003fc0)=""/80, 0x50}, {&(0x7f0000004040)=""/25, 0x19}, {&(0x7f0000004080)=""/230, 0xe6}], 0x4}, 0x5b2}, {{&(0x7f00000041c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000006700)=[{&(0x7f0000004240)=""/80, 0x50}, {&(0x7f00000042c0)=""/141, 0x8d}, {&(0x7f0000004380)=""/235, 0xeb}, {&(0x7f0000004480)=""/174, 0xae}, {&(0x7f0000004540)=""/63, 0x3f}, {&(0x7f0000004580)=""/75, 0x4b}, {&(0x7f0000004600)=""/160, 0xa0}, {&(0x7f00000046c0)=""/16, 0x10}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/4096, 0x1000}], 0xa}, 0x8}, {{&(0x7f00000067c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000006880)=[{&(0x7f0000006840)=""/31, 0x1f}], 0x1, &(0x7f00000068c0)=""/4096, 0x1000}, 0xfff}, {{0x0, 0x0, &(0x7f0000009a00)=[{&(0x7f00000078c0)=""/4096, 0x1000}, {&(0x7f00000088c0)=""/211, 0xd3}, {&(0x7f00000089c0)=""/4096, 0x1000}, {&(0x7f00000099c0)=""/18, 0x12}], 0x4, &(0x7f0000009a40)=""/110, 0x6e}, 0x8}], 0x6, 0x12000, &(0x7f0000009c40)={0x0, 0x989680}) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) sendfile(r8, r9, 0x0, 0x3) 20:26:20 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x8, 0xc8, "d049d6061030a0f5"}}}, 0xe) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x8, 0xc8, "d049d6061030a0f5"}}}, 0xe) (async) 20:26:20 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:20 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x8, 0xc8, "d049d6061030a0f5"}}}, 0xe) 20:26:20 executing program 5: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = dup(r1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) 20:26:21 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:21 executing program 0: syz_clone3(&(0x7f00000002c0)={0x800, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x21}, &(0x7f0000000180)=""/97, 0x61, &(0x7f0000000200)=""/98, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) getpgid(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0423bbcd71e310dba0a9570a44c7968c19733ef147b278d427e7ade8caf1b1f6e31bb6ed26cf58eed6e1e75681a2ceb236f162c1f06608e30500d7b823b8b0cbc6dec1b7ed816655dda241d50d72f8af7f0ffa77be9e3599a55191b244120a4ca83cb9d4bc71a22f8f9c59000000000000"], 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 20:26:21 executing program 5: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 64) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = dup(r1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) 20:26:21 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:21 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:21 executing program 0: syz_clone3(&(0x7f00000002c0)={0x800, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x21}, &(0x7f0000000180)=""/97, 0x61, &(0x7f0000000200)=""/98, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) getpgid(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0423bbcd71e310dba0a9570a44c7968c19733ef147b278d427e7ade8caf1b1f6e31bb6ed26cf58eed6e1e75681a2ceb236f162c1f06608e30500d7b823b8b0cbc6dec1b7ed816655dda241d50d72f8af7f0ffa77be9e3599a55191b244120a4ca83cb9d4bc71a22f8f9c59000000000000"], 0x6) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 1550.217924][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 20:26:21 executing program 5: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = dup(r1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) socket(0x2, 0x3, 0x100000001) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) dup(r1) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) (async) [ 1550.379004][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.386292][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.393415][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.400595][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.409992][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.416991][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.424921][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.431934][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.439330][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.446363][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.453405][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.460445][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.467434][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.474463][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.484274][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.491340][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.498316][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.505819][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.512813][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.519823][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.526784][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.533814][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.540840][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.547799][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.555196][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.562304][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.569338][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 20:26:21 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000000c0)) 20:26:21 executing program 0: syz_clone3(&(0x7f00000002c0)={0x800, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x21}, &(0x7f0000000180)=""/97, 0x61, &(0x7f0000000200)=""/98, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) getpgid(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0423bbcd71e310dba0a9570a44c7968c19733ef147b278d427e7ade8caf1b1f6e31bb6ed26cf58eed6e1e75681a2ceb236f162c1f06608e30500d7b823b8b0cbc6dec1b7ed816655dda241d50d72f8af7f0ffa77be9e3599a55191b244120a4ca83cb9d4bc71a22f8f9c59000000000000"], 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 1550.576537][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.583607][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.590755][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.598632][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.606238][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 [ 1550.613727][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 20:26:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:21 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async, rerun: 64) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) (rerun: 64) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000000c0)) 20:26:21 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000000c0)) [ 1550.827457][ T5017] Bluetooth: hci0: unexpected event 0x23 length: 3 < 13 20:26:22 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:22 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) sendmmsg$unix(r4, &(0x7f0000000080), 0x0, 0x8081) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1000, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 20:26:22 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9e00304009e0300000000000000"], 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x1d}, @l2cap_cid_signaling={{0x19}, [@l2cap_info_req={{0xa, 0xc, 0x2}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x8}, {0x5, 0x32e5, [@l2cap_conf_ews={0x7, 0x2, 0x7}]}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x4, 0x8a}}]}}, 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x80}}]}}, 0x11) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfa}, "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"}, 0xfe) 20:26:22 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:22 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9e00304009e0300000000000000"], 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x1d}, @l2cap_cid_signaling={{0x19}, [@l2cap_info_req={{0xa, 0xc, 0x2}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x8}, {0x5, 0x32e5, [@l2cap_conf_ews={0x7, 0x2, 0x7}]}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x4, 0x8a}}]}}, 0x22) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x80}}]}}, 0x11) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfa}, "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"}, 0xfe) [ 1551.201264][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:22 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) sendmmsg$unix(r4, &(0x7f0000000080), 0x0, 0x8081) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1000, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 20:26:22 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9e00304009e0300000000000000"], 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x1d}, @l2cap_cid_signaling={{0x19}, [@l2cap_info_req={{0xa, 0xc, 0x2}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x8}, {0x5, 0x32e5, [@l2cap_conf_ews={0x7, 0x2, 0x7}]}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x4, 0x8a}}]}}, 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x80}}]}}, 0x11) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfa}, "2bb58880a2ca554c3973793c74cffc1baa7fd9df7b42ab9fb843b50a3f68b47c40440d5bdb2a25041f4339aedcb2c194f2c7c411b6a76ff089f7a857271fe0a65b64d857a42d2ae67b6b9fe5c86cdac15b58af5e29d72e57798e896cb657bfdc833d92924adc38e90d5fecf50d0d9b55bf520af865031c837bb940684cc65b6902cc1f880bc9d8f122bb7294644ad13f91a2e4bb97bfaf28f28204b6e7619ad14451fc129e05d355124e3a90d3c7c09993ecfcdac559313a31f51c26b5a1662098291651c0872b9ac2b59164e313cdc75fcc2201afa0a0c5a487d33930945e56c60b15a69ece4441c7176c98cc6d5416106a99ed5dbf00ae30e8"}, 0xfe) [ 1551.372638][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:22 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) sendmmsg$unix(r4, &(0x7f0000000080), 0x0, 0x8081) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1000, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 1551.509686][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x6) 20:26:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x6) 20:26:22 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:22 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)=0x0) r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x10, 0x0, @fd_index=0x4, 0xcc, 0x0, 0x0, 0x6, 0x1, {0x0, r9}}, 0x5a1) r10 = socket(0x2, 0x3, 0x100000001) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r10, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r10, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r10, 0x80, &(0x7f00000003c0)=@ll={0x11, 0x1c, 0x0, 0x1, 0x1f, 0x6, @local}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x9) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:22 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x6) 20:26:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:23 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 20:26:23 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async, rerun: 64) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = dup(r0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)=0x0) (async) r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x10, 0x0, @fd_index=0x4, 0xcc, 0x0, 0x0, 0x6, 0x1, {0x0, r9}}, 0x5a1) (async) r10 = socket(0x2, 0x3, 0x100000001) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32) sendto(r10, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r10, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async, rerun: 64) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r10, 0x80, &(0x7f00000003c0)=@ll={0x11, 0x1c, 0x0, 0x1, 0x1f, 0x6, @local}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x9) (async, rerun: 64) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:23 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (rerun: 64) [ 1552.369764][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.440429][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.448012][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.456835][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.465469][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.475973][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.483428][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.490581][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.497629][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.504846][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.512138][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.519784][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.527063][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.534108][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.541168][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.548187][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.555755][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.563446][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.570928][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.577975][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.586249][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.593262][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.600354][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.607598][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.614676][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.621834][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.629391][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.636385][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.643458][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.650479][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.657917][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.665087][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.672524][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.679581][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.686550][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.694392][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.701397][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.708943][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:23 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)=0x0) r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x10, 0x0, @fd_index=0x4, 0xcc, 0x0, 0x0, 0x6, 0x1, {0x0, r9}}, 0x5a1) r10 = socket(0x2, 0x3, 0x100000001) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r10, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r10, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r10, 0x80, &(0x7f00000003c0)=@ll={0x11, 0x1c, 0x0, 0x1, 0x1f, 0x6, @local}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x9) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)) (async) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x10, 0x0, @fd_index=0x4, 0xcc, 0x0, 0x0, 0x6, 0x1, {0x0, r9}}, 0x5a1) (async) socket(0x2, 0x3, 0x100000001) (async) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r10, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r10, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r10, 0x80, &(0x7f00000003c0)=@ll={0x11, 0x1c, 0x0, 0x1, 0x1f, 0x6, @local}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x9) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) [ 1552.733839][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.762866][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.775995][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.784282][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.791617][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.798828][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.805936][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.812987][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.820972][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.827927][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.835062][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.842087][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.849186][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.856144][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.863911][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.870967][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.877924][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.885000][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.892016][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.899057][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.906002][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.913619][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.920632][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.927574][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:23 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:23 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 1552.934736][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.941706][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.948748][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1552.955713][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:23 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x6502, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r2, 0x0, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="e3a2cea13700000000aa19d37dcb5b34463b77568c24f695c0f290c9edbd5e3ecd1130fea3e9ee474f5e91574a229baf9dc53ddee942b15009bb1a21416d4ea04607f53dd319ab15da6182b3304046d1f8d5a6c573128d39025265a700"/105], 0x6) r3 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000180)={'macvtap0\x00', {0x2, 0x0, @multicast2}}) [ 1553.093988][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:24 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:24 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:24 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) dup(r0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:24 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0xfe, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x15d, 0x0, r2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) syz_io_uring_submit(r5, r4, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x43, 0x0, r7, 0xfd, &(0x7f00000003c0)="3d988e1fea27aa2cfcdc50cae2d9df863b7c73ca4ed44d6fe2aed9b4854adb9488e533fec9d2d99a13113323f5f96520c588ecbaab0c502949766c94885e6918e06a6bd2708a09b54a93a85a74607ea004ec72eed8427172064ff9a9d018c35bfad48ee7167d2a7d7a12c24d8da4d52e4cd5f2c428e355b94e4b27e8116cbdfabe01df6928d0629983e5041430ccd2ec4d3bd564fa0e724a068510f064086e38b01cd27f0a4066f488ef5614ccefeff08a37de9e888410cb002c2d189d5a306c92bd", 0xc2}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0x1) 20:26:24 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:24 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:24 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:24 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x6502, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r2, 0x0, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="e3a2cea13700000000aa19d37dcb5b34463b77568c24f695c0f290c9edbd5e3ecd1130fea3e9ee474f5e91574a229baf9dc53ddee942b15009bb1a21416d4ea04607f53dd319ab15da6182b3304046d1f8d5a6c573128d39025265a700"/105], 0x6) (async) r3 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000180)={'macvtap0\x00', {0x2, 0x0, @multicast2}}) 20:26:25 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x6502, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r1) (async) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r2, 0x0, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) (async) renameat2(r0, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="e3a2cea13700000000aa19d37dcb5b34463b77568c24f695c0f290c9edbd5e3ecd1130fea3e9ee474f5e91574a229baf9dc53ddee942b15009bb1a21416d4ea04607f53dd319ab15da6182b3304046d1f8d5a6c573128d39025265a700"/105], 0x6) r3 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000180)={'macvtap0\x00', {0x2, 0x0, @multicast2}}) 20:26:25 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r2, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0xfe, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x15d, 0x0, r2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (async) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) syz_io_uring_submit(r5, r4, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x43, 0x0, r7, 0xfd, &(0x7f00000003c0)="3d988e1fea27aa2cfcdc50cae2d9df863b7c73ca4ed44d6fe2aed9b4854adb9488e533fec9d2d99a13113323f5f96520c588ecbaab0c502949766c94885e6918e06a6bd2708a09b54a93a85a74607ea004ec72eed8427172064ff9a9d018c35bfad48ee7167d2a7d7a12c24d8da4d52e4cd5f2c428e355b94e4b27e8116cbdfabe01df6928d0629983e5041430ccd2ec4d3bd564fa0e724a068510f064086e38b01cd27f0a4066f488ef5614ccefeff08a37de9e888410cb002c2d189d5a306c92bd", 0xc2}, 0x0) (async) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0x1) 20:26:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x6) 20:26:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x6) 20:26:25 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r2, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0xfe, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x15d, 0x0, r2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) (async) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) syz_io_uring_submit(r5, r4, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x43, 0x0, r7, 0xfd, &(0x7f00000003c0)="3d988e1fea27aa2cfcdc50cae2d9df863b7c73ca4ed44d6fe2aed9b4854adb9488e533fec9d2d99a13113323f5f96520c588ecbaab0c502949766c94885e6918e06a6bd2708a09b54a93a85a74607ea004ec72eed8427172064ff9a9d018c35bfad48ee7167d2a7d7a12c24d8da4d52e4cd5f2c428e355b94e4b27e8116cbdfabe01df6928d0629983e5041430ccd2ec4d3bd564fa0e724a068510f064086e38b01cd27f0a4066f488ef5614ccefeff08a37de9e888410cb002c2d189d5a306c92bd", 0xc2}, 0x0) (async) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0x1) 20:26:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x6) 20:26:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:25 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x462100) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x10, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000000c0)=""/161, 0xa1}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) 20:26:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:25 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0400"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x75, 0x1000, 0x4, 0xfff7}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x5, 0x2}, {0x1}}}}, 0xf) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0x5b5a265d0b6fda34, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb8}, "e3cd20bb3da60aa23e370e2821be2286f88d3554006220d6b55ab2cdb9eca3543fceeb5302e6afae9736c396096bd1390b9fb3ed34cf00230e040110545fc6aea8f078cce2843b490dbce6db611d5660a19eef543033d08f34a6aabf437efc4cc00dd27482e7c91944d2af5da8b4a19db2020812a122933ce5a1070240415ae6d6c52b64e54b41760d1941cdfa9ab82db52b506c528a87467b7a1d7e46f17c64a68007b71d2e93f7bebb715f0310479c1457f1e8f57f5c8f"}, 0xbc) 20:26:25 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x462100) (async, rerun: 64) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async, rerun: 64) r4 = socket(0x2, 0x3, 0x100000001) (rerun: 64) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async, rerun: 32) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x10, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) (async) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000000c0)=""/161, 0xa1}) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) 20:26:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) [ 1555.038492][ T5017] Bluetooth: hci0: Received unexpected HCI Event 0x00 20:26:26 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:26 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0400"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x75, 0x1000, 0x4, 0xfff7}}]}}, 0x15) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x5, 0x2}, {0x1}}}}, 0xf) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0x5b5a265d0b6fda34, 0x1000}, "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"}, 0x1004) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb8}, "e3cd20bb3da60aa23e370e2821be2286f88d3554006220d6b55ab2cdb9eca3543fceeb5302e6afae9736c396096bd1390b9fb3ed34cf00230e040110545fc6aea8f078cce2843b490dbce6db611d5660a19eef543033d08f34a6aabf437efc4cc00dd27482e7c91944d2af5da8b4a19db2020812a122933ce5a1070240415ae6d6c52b64e54b41760d1941cdfa9ab82db52b506c528a87467b7a1d7e46f17c64a68007b71d2e93f7bebb715f0310479c1457f1e8f57f5c8f"}, 0xbc) 20:26:26 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x462100) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x462100) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x10, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000000c0)=""/161, 0xa1}) (async) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000000c0)=""/161, 0xa1}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) dup(r0) (async) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) 20:26:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:26 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0400"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x75, 0x1000, 0x4, 0xfff7}}]}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x5, 0x2}, {0x1}}}}, 0xf) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0x5b5a265d0b6fda34, 0x1000}, "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"}, 0x1004) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb8}, "e3cd20bb3da60aa23e370e2821be2286f88d3554006220d6b55ab2cdb9eca3543fceeb5302e6afae9736c396096bd1390b9fb3ed34cf00230e040110545fc6aea8f078cce2843b490dbce6db611d5660a19eef543033d08f34a6aabf437efc4cc00dd27482e7c91944d2af5da8b4a19db2020812a122933ce5a1070240415ae6d6c52b64e54b41760d1941cdfa9ab82db52b506c528a87467b7a1d7e46f17c64a68007b71d2e93f7bebb715f0310479c1457f1e8f57f5c8f"}, 0xbc) [ 1555.483419][T12246] Bluetooth: hci0: Received unexpected HCI Event 0x00 20:26:26 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5dc, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) [ 1555.577132][ T5017] Bluetooth: hci0: Received unexpected HCI Event 0x00 20:26:26 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 1555.765755][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:26 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 32) r1 = syz_io_uring_setup(0x5dc, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async, rerun: 32) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:27 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:27 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 20:26:27 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5dc, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:27 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 1556.394260][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:27 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000080)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) 20:26:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) [ 1556.528499][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:27 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x2b}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80, 0x9, 0x9, "f559a2", 0x9}, {@none, 0xf9, 0x40, 0x9, "23f1c5"}, {@any, 0x1f, 0x1, 0x40, "a78d01", 0x4}]}}}, 0x2e) 20:26:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:27 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x2b}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80, 0x9, 0x9, "f559a2", 0x9}, {@none, 0xf9, 0x40, 0x9, "23f1c5"}, {@any, 0x1f, 0x1, 0x40, "a78d01", 0x4}]}}}, 0x2e) [ 1556.827825][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1556.932748][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:28 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:28 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x2b}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80, 0x9, 0x9, "f559a2", 0x9}, {@none, 0xf9, 0x40, 0x9, "23f1c5"}, {@any, 0x1f, 0x1, 0x40, "a78d01", 0x4}]}}}, 0x2e) 20:26:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) [ 1557.345219][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2e}]}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xfc, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xdf32}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040b"], 0x6) 20:26:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:28 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000080)) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) 20:26:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = dup2(r0, r0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2e}]}]}]}, 0x3c}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xfc, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xdf32}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040b"], 0x6) [ 1557.478469][T12246] Bluetooth: hci0: unexpected event 0x0b length: 3 < 11 20:26:28 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) (async) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) (async) getsockname$packet(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000080)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) 20:26:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) [ 1557.626146][T12246] Bluetooth: hci0: unexpected event 0x0b length: 3 < 11 20:26:28 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r7, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2e}]}]}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xfc, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xdf32}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040b"], 0x6) 20:26:28 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) [ 1557.846028][ T5017] Bluetooth: hci0: unexpected event 0x0b length: 3 < 11 20:26:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:28 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$video(&(0x7f00000003c0), 0x1, 0x400000) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r3, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r6 = socket(0x2, 0x3, 0x100000001) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r6, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r7 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) statx(r1, &(0x7f0000000580)='./file0\x00', 0x0, 0x40, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x3, &(0x7f0000000380)=[r11, r11, r11]) sendmsg$netlink(r1, &(0x7f00000008c0)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x8, 0x70bd29, 0x25dfdbfe, "", [@typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@loopback}, @generic="6b6bb06e82c8d1b3d0d7df45f7a36e30d43c8c078ea3b6ef108b6b2b3474ffa7f8b59f4b3e521dda4e28f9b1773f4252106b5221f96fb829263f5ff52af4cd25f5d3478c1839fabbad3524afc242a4df5abcb23eee3f94ef2bd584f2e5b195117a6ea935ddd89c0ed8777db7515776e51085a3abd6ebb532e5f4716d6a652b50027ce694af0bae5a4e0ac4782464d103fdc7f5a818fcfd4b91ac4de3a0955e38bf055a11bb0747ab0dc6e28b381b36ce3071e59d62b3e1a4a2f9f6c75ce989f427262225cafe0a15669c3f7fb00351ee", @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x87, 0x0, 0x0, @u32=0x8001}, @typed={0x8, 0x56, 0x0, 0x0, @fd=r1}]}, 0x10c}, {&(0x7f0000000280)={0xfc, 0x21, 0x4, 0x70bd25, 0x25dfdbfd, "", [@generic="cb5f702827906fe8095aac21941ae96326590d0bb9102f97d1073c56809bf72d9df04901107b77edcc9eaaec6485202bfb400de6f066f30b3da8b837dfa65055332c4f09ea15fc164765525ace9e51d530411b5560df210ad6db471ad368f164af17eacb85963ec1dc6a38e1c785db786bcb1a96b68bf1b958cf543f5be7797cb19ad1e8d8472e4443582e07e08799ba1f3b315a2f25a57fa99a101f8f46536a65bf13b9658f9fe354b8685f6964e5d7922d0000a6df15e3d4e10f568d962249a48df516d1d8db00506140b580ca89059a19c393abab2a4c00c62ec18a49b3a1f744bc29e0bd2d33d6a8d4"]}, 0xfc}], 0x2, &(0x7f0000000800)=[@rights={{0x30, 0x1, 0x1, [r2, r0, r3, r4, r1, r5, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}], 0x88, 0xa000001}, 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000000c0)=0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa5}, "8104fa34a15823216307e6112f3e9add8b1ac3070016ebf2505b02921760c58720e2a8a4aafbc1df633148dca876f2168ec73e2e848a398977a95ea984ed62a7e73d2275d41d4875274da712ed654051536b378fbbe991e7482bac53753e86f07a761ed0552626788104dd1834ae117ddc2d2eba95d9d8d206c3240db5e880ad7f663006a5fca50cdd8027cca3fa1105a9633d3523d543ba8a941e5e9c6ce27965cb38c3b7"}, 0xa9) 20:26:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:29 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141301) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x4510, 0x280d, 0x10, 0x0, 0x0) r4 = dup(r0) connect$unix(r4, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open$dir(&(0x7f0000000080)='./file0\x00', 0xa00, 0x100) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$bt_cmtp(0x1f, 0x3, 0x5) sendto(r6, &(0x7f0000000140)="015622ca3b01", 0x2, 0x4000006, 0x0, 0xfffffffffffffdf0) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) sendfile(r0, r5, &(0x7f0000000040)=0x7fffffff, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:29 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141301) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x4510, 0x280d, 0x10, 0x0, 0x0) (async) r4 = dup(r0) connect$unix(r4, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open$dir(&(0x7f0000000080)='./file0\x00', 0xa00, 0x100) (async) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) r6 = socket$bt_cmtp(0x1f, 0x3, 0x5) (rerun: 64) sendto(r6, &(0x7f0000000140)="015622ca3b01", 0x2, 0x4000006, 0x0, 0xfffffffffffffdf0) (async) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) sendfile(r0, r5, &(0x7f0000000040)=0x7fffffff, 0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r7, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:29 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141301) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x4510, 0x280d, 0x10, 0x0, 0x0) r4 = dup(r0) connect$unix(r4, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open$dir(&(0x7f0000000080)='./file0\x00', 0xa00, 0x100) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$bt_cmtp(0x1f, 0x3, 0x5) sendto(r6, &(0x7f0000000140)="015622ca3b01", 0x2, 0x4000006, 0x0, 0xfffffffffffffdf0) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) sendfile(r0, r5, &(0x7f0000000040)=0x7fffffff, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141301) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x4510, 0x280d, 0x10, 0x0, 0x0) (async) dup(r0) (async) connect$unix(r4, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0xa00, 0x100) (async) socket(0x2, 0x3, 0x100000001) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) sendto(r6, &(0x7f0000000140)="015622ca3b01", 0x2, 0x4000006, 0x0, 0xfffffffffffffdf0) (async) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) sendfile(r0, r5, &(0x7f0000000040)=0x7fffffff, 0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) 20:26:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:29 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:29 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$video(&(0x7f00000003c0), 0x1, 0x400000) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32) sendto(r3, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async, rerun: 32) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff}) (async) r6 = socket(0x2, 0x3, 0x100000001) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) sendto(r6, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async, rerun: 64) sendto$inet(r6, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r7 = getpid() (async, rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) (async, rerun: 64) statx(r1, &(0x7f0000000580)='./file0\x00', 0x0, 0x40, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x3, &(0x7f0000000380)=[r11, r11, r11]) (async, rerun: 64) sendmsg$netlink(r1, &(0x7f00000008c0)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x8, 0x70bd29, 0x25dfdbfe, "", [@typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@loopback}, @generic="6b6bb06e82c8d1b3d0d7df45f7a36e30d43c8c078ea3b6ef108b6b2b3474ffa7f8b59f4b3e521dda4e28f9b1773f4252106b5221f96fb829263f5ff52af4cd25f5d3478c1839fabbad3524afc242a4df5abcb23eee3f94ef2bd584f2e5b195117a6ea935ddd89c0ed8777db7515776e51085a3abd6ebb532e5f4716d6a652b50027ce694af0bae5a4e0ac4782464d103fdc7f5a818fcfd4b91ac4de3a0955e38bf055a11bb0747ab0dc6e28b381b36ce3071e59d62b3e1a4a2f9f6c75ce989f427262225cafe0a15669c3f7fb00351ee", @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x87, 0x0, 0x0, @u32=0x8001}, @typed={0x8, 0x56, 0x0, 0x0, @fd=r1}]}, 0x10c}, {&(0x7f0000000280)={0xfc, 0x21, 0x4, 0x70bd25, 0x25dfdbfd, "", [@generic="cb5f702827906fe8095aac21941ae96326590d0bb9102f97d1073c56809bf72d9df04901107b77edcc9eaaec6485202bfb400de6f066f30b3da8b837dfa65055332c4f09ea15fc164765525ace9e51d530411b5560df210ad6db471ad368f164af17eacb85963ec1dc6a38e1c785db786bcb1a96b68bf1b958cf543f5be7797cb19ad1e8d8472e4443582e07e08799ba1f3b315a2f25a57fa99a101f8f46536a65bf13b9658f9fe354b8685f6964e5d7922d0000a6df15e3d4e10f568d962249a48df516d1d8db00506140b580ca89059a19c393abab2a4c00c62ec18a49b3a1f744bc29e0bd2d33d6a8d4"]}, 0xfc}], 0x2, &(0x7f0000000800)=[@rights={{0x30, 0x1, 0x1, [r2, r0, r3, r4, r1, r5, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}], 0x88, 0xa000001}, 0x10) (async, rerun: 64) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) (async, rerun: 64) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000000c0)=0x3) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa5}, "8104fa34a15823216307e6112f3e9add8b1ac3070016ebf2505b02921760c58720e2a8a4aafbc1df633148dca876f2168ec73e2e848a398977a95ea984ed62a7e73d2275d41d4875274da712ed654051536b378fbbe991e7482bac53753e86f07a761ed0552626788104dd1834ae117ddc2d2eba95d9d8d206c3240db5e880ad7f663006a5fca50cdd8027cca3fa1105a9633d3523d543ba8a941e5e9c6ce27965cb38c3b7"}, 0xa9) 20:26:29 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x0, 0x80, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) fchown(r4, 0xee01, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) 20:26:29 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x0, 0x80, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (async) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) fchown(r4, 0xee01, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) 20:26:30 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$video(&(0x7f00000003c0), 0x1, 0x400000) socket(0x2, 0x3, 0x100000001) (async) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r3, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto(r3, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000400)) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r6 = socket(0x2, 0x3, 0x100000001) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r6, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) getpid() (async) r7 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) statx(r1, &(0x7f0000000580)='./file0\x00', 0x0, 0x40, &(0x7f00000005c0)) (async) statx(r1, &(0x7f0000000580)='./file0\x00', 0x0, 0x40, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x3, &(0x7f0000000380)=[r11, r11, r11]) sendmsg$netlink(r1, &(0x7f00000008c0)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x8, 0x70bd29, 0x25dfdbfe, "", [@typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@loopback}, @generic="6b6bb06e82c8d1b3d0d7df45f7a36e30d43c8c078ea3b6ef108b6b2b3474ffa7f8b59f4b3e521dda4e28f9b1773f4252106b5221f96fb829263f5ff52af4cd25f5d3478c1839fabbad3524afc242a4df5abcb23eee3f94ef2bd584f2e5b195117a6ea935ddd89c0ed8777db7515776e51085a3abd6ebb532e5f4716d6a652b50027ce694af0bae5a4e0ac4782464d103fdc7f5a818fcfd4b91ac4de3a0955e38bf055a11bb0747ab0dc6e28b381b36ce3071e59d62b3e1a4a2f9f6c75ce989f427262225cafe0a15669c3f7fb00351ee", @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x87, 0x0, 0x0, @u32=0x8001}, @typed={0x8, 0x56, 0x0, 0x0, @fd=r1}]}, 0x10c}, {&(0x7f0000000280)={0xfc, 0x21, 0x4, 0x70bd25, 0x25dfdbfd, "", [@generic="cb5f702827906fe8095aac21941ae96326590d0bb9102f97d1073c56809bf72d9df04901107b77edcc9eaaec6485202bfb400de6f066f30b3da8b837dfa65055332c4f09ea15fc164765525ace9e51d530411b5560df210ad6db471ad368f164af17eacb85963ec1dc6a38e1c785db786bcb1a96b68bf1b958cf543f5be7797cb19ad1e8d8472e4443582e07e08799ba1f3b315a2f25a57fa99a101f8f46536a65bf13b9658f9fe354b8685f6964e5d7922d0000a6df15e3d4e10f568d962249a48df516d1d8db00506140b580ca89059a19c393abab2a4c00c62ec18a49b3a1f744bc29e0bd2d33d6a8d4"]}, 0xfc}], 0x2, &(0x7f0000000800)=[@rights={{0x30, 0x1, 0x1, [r2, r0, r3, r4, r1, r5, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}], 0x88, 0xa000001}, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000008c0)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000140)={0x10c, 0x1e, 0x8, 0x70bd29, 0x25dfdbfe, "", [@typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@loopback}, @generic="6b6bb06e82c8d1b3d0d7df45f7a36e30d43c8c078ea3b6ef108b6b2b3474ffa7f8b59f4b3e521dda4e28f9b1773f4252106b5221f96fb829263f5ff52af4cd25f5d3478c1839fabbad3524afc242a4df5abcb23eee3f94ef2bd584f2e5b195117a6ea935ddd89c0ed8777db7515776e51085a3abd6ebb532e5f4716d6a652b50027ce694af0bae5a4e0ac4782464d103fdc7f5a818fcfd4b91ac4de3a0955e38bf055a11bb0747ab0dc6e28b381b36ce3071e59d62b3e1a4a2f9f6c75ce989f427262225cafe0a15669c3f7fb00351ee", @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x87, 0x0, 0x0, @u32=0x8001}, @typed={0x8, 0x56, 0x0, 0x0, @fd=r1}]}, 0x10c}, {&(0x7f0000000280)={0xfc, 0x21, 0x4, 0x70bd25, 0x25dfdbfd, "", [@generic="cb5f702827906fe8095aac21941ae96326590d0bb9102f97d1073c56809bf72d9df04901107b77edcc9eaaec6485202bfb400de6f066f30b3da8b837dfa65055332c4f09ea15fc164765525ace9e51d530411b5560df210ad6db471ad368f164af17eacb85963ec1dc6a38e1c785db786bcb1a96b68bf1b958cf543f5be7797cb19ad1e8d8472e4443582e07e08799ba1f3b315a2f25a57fa99a101f8f46536a65bf13b9658f9fe354b8685f6964e5d7922d0000a6df15e3d4e10f568d962249a48df516d1d8db00506140b580ca89059a19c393abab2a4c00c62ec18a49b3a1f744bc29e0bd2d33d6a8d4"]}, 0xfc}], 0x2, &(0x7f0000000800)=[@rights={{0x30, 0x1, 0x1, [r2, r0, r3, r4, r1, r5, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}], 0x88, 0xa000001}, 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) (async) getsockname$packet(r1, 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000000c0)=0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa5}, "8104fa34a15823216307e6112f3e9add8b1ac3070016ebf2505b02921760c58720e2a8a4aafbc1df633148dca876f2168ec73e2e848a398977a95ea984ed62a7e73d2275d41d4875274da712ed654051536b378fbbe991e7482bac53753e86f07a761ed0552626788104dd1834ae117ddc2d2eba95d9d8d206c3240db5e880ad7f663006a5fca50cdd8027cca3fa1105a9633d3523d543ba8a941e5e9c6ce27965cb38c3b7"}, 0xa9) 20:26:30 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x24}, @l2cap_cid_signaling={{0x20}, [@l2cap_create_chan_rsp={{0xd, 0xea, 0x8}, {0x4, 0x6, 0x4, 0x5440}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x7, 0x7e, 0x1, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x1, 0xfff}}]}}, 0x29) 20:26:30 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 64) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x0, 0x80, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 64) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r4, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) fchown(r4, 0xee01, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async, rerun: 32) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) [ 1559.354185][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:30 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x24}, @l2cap_cid_signaling={{0x20}, [@l2cap_create_chan_rsp={{0xd, 0xea, 0x8}, {0x4, 0x6, 0x4, 0x5440}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x7, 0x7e, 0x1, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x1, 0xfff}}]}}, 0x29) 20:26:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) [ 1559.525136][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:30 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) io_uring_enter(0xffffffffffffffff, 0x558c, 0x6c47, 0x39, &(0x7f0000000080)={[0x4]}, 0x8) 20:26:30 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x24}, @l2cap_cid_signaling={{0x20}, [@l2cap_create_chan_rsp={{0xd, 0xea, 0x8}, {0x4, 0x6, 0x4, 0x5440}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x7, 0x7e, 0x1, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x1, 0xfff}}]}}, 0x29) 20:26:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r7, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) [ 1559.735482][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:30 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="79a3a4e9e8a3a1e00add433005f96e934c16230cffa30f58c0d6fd8e2a467b86a6e7b7c0f5d74056db84c52f526adf32f48c266b3223cdee825ed1094809288d9e6396d72cabf6b6146967f4151e2020771e423357f8f0fa275400d1d78dff9cc9dd7264809155ece31b912bc7e9e2a6c6ec1399454bb6a53e64bb2f7e4d450cc1d4a46d726fad5d9cb9fd4f8c1060dab280c9e157a9ec8f154d65dbd4989c1d2a9764cef37f5c7bbb5a0ca676aa9154243adc2e7789c3c22b816532afe557933f12bb642e9d"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@none, 0x5b, 0x9, 0x3, "c76d92", 0x7, 0xff}, {@none, 0x7, 0x1, 0x8, "15779e", 0x7, 0x2}, {@any, 0x8c, 0x9, 0x4, "1319b0", 0x3f, 0x5}, {@any, 0x80, 0x20, 0x81, "c81a00", 0x4, 0x9}, {@any, 0x0, 0x2, 0x97, "c84496", 0x1000, 0x8}, {@none, 0x5, 0x0, 0x7f, "78efdd", 0x2}, {@any, 0xfb, 0x7, 0x7f, "a95a51", 0x0, 0x1}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa9}, "cff4ab9add5e972b2a3a946da61c6a4db5ad7ba4c53ba70af8226e366aea9e9b08434f2d9548578edb23665525cab96c965054cce01774d4ad58bb75de5c229aed447cac90c10cf07625aa9235d48f060c2c468550458f170dbca4e80c80e445834b5e9f777447ec8f9fe2a676a852c069f5e3f7fac302ed0197b364ca819d30e4e4764edd19d4e9bcc41892b9794d94b67d1d4ea7c5135ae1010a8b07b722427cb58a98770df3fa6c"}, 0xad) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0xf5, 0x3, 0x0, "752c86", 0x3, 0x3a}, {@none, 0x20, 0x84, 0xdb, "97820d", 0x5, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x0, 0x7, "71bd61", 0x5, 0xfc}]}}}, 0x31) 20:26:30 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r7 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r7, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x2}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:30 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) io_uring_enter(0xffffffffffffffff, 0x558c, 0x6c47, 0x39, &(0x7f0000000080)={[0x4]}, 0x8) 20:26:30 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r5 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r5, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r4, 0x0, 0x0}, 0x5) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r4, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:30 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="79a3a4e9e8a3a1e00add433005f96e934c16230cffa30f58c0d6fd8e2a467b86a6e7b7c0f5d74056db84c52f526adf32f48c266b3223cdee825ed1094809288d9e6396d72cabf6b6146967f4151e2020771e423357f8f0fa275400d1d78dff9cc9dd7264809155ece31b912bc7e9e2a6c6ec1399454bb6a53e64bb2f7e4d450cc1d4a46d726fad5d9cb9fd4f8c1060dab280c9e157a9ec8f154d65dbd4989c1d2a9764cef37f5c7bbb5a0ca676aa9154243adc2e7789c3c22b816532afe557933f12bb642e9d"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@none, 0x5b, 0x9, 0x3, "c76d92", 0x7, 0xff}, {@none, 0x7, 0x1, 0x8, "15779e", 0x7, 0x2}, {@any, 0x8c, 0x9, 0x4, "1319b0", 0x3f, 0x5}, {@any, 0x80, 0x20, 0x81, "c81a00", 0x4, 0x9}, {@any, 0x0, 0x2, 0x97, "c84496", 0x1000, 0x8}, {@none, 0x5, 0x0, 0x7f, "78efdd", 0x2}, {@any, 0xfb, 0x7, 0x7f, "a95a51", 0x0, 0x1}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa9}, "cff4ab9add5e972b2a3a946da61c6a4db5ad7ba4c53ba70af8226e366aea9e9b08434f2d9548578edb23665525cab96c965054cce01774d4ad58bb75de5c229aed447cac90c10cf07625aa9235d48f060c2c468550458f170dbca4e80c80e445834b5e9f777447ec8f9fe2a676a852c069f5e3f7fac302ed0197b364ca819d30e4e4764edd19d4e9bcc41892b9794d94b67d1d4ea7c5135ae1010a8b07b722427cb58a98770df3fa6c"}, 0xad) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0xf5, 0x3, 0x0, "752c86", 0x3, 0x3a}, {@none, 0x20, 0x84, 0xdb, "97820d", 0x5, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x0, 0x7, "71bd61", 0x5, 0xfc}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="79a3a4e9e8a3a1e00add433005f96e934c16230cffa30f58c0d6fd8e2a467b86a6e7b7c0f5d74056db84c52f526adf32f48c266b3223cdee825ed1094809288d9e6396d72cabf6b6146967f4151e2020771e423357f8f0fa275400d1d78dff9cc9dd7264809155ece31b912bc7e9e2a6c6ec1399454bb6a53e64bb2f7e4d450cc1d4a46d726fad5d9cb9fd4f8c1060dab280c9e157a9ec8f154d65dbd4989c1d2a9764cef37f5c7bbb5a0ca676aa9154243adc2e7789c3c22b816532afe557933f12bb642e9d"], 0x6) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@none, 0x5b, 0x9, 0x3, "c76d92", 0x7, 0xff}, {@none, 0x7, 0x1, 0x8, "15779e", 0x7, 0x2}, {@any, 0x8c, 0x9, 0x4, "1319b0", 0x3f, 0x5}, {@any, 0x80, 0x20, 0x81, "c81a00", 0x4, 0x9}, {@any, 0x0, 0x2, 0x97, "c84496", 0x1000, 0x8}, {@none, 0x5, 0x0, 0x7f, "78efdd", 0x2}, {@any, 0xfb, 0x7, 0x7f, "a95a51", 0x0, 0x1}]}}}, 0x6d) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa9}, "cff4ab9add5e972b2a3a946da61c6a4db5ad7ba4c53ba70af8226e366aea9e9b08434f2d9548578edb23665525cab96c965054cce01774d4ad58bb75de5c229aed447cac90c10cf07625aa9235d48f060c2c468550458f170dbca4e80c80e445834b5e9f777447ec8f9fe2a676a852c069f5e3f7fac302ed0197b364ca819d30e4e4764edd19d4e9bcc41892b9794d94b67d1d4ea7c5135ae1010a8b07b722427cb58a98770df3fa6c"}, 0xad) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0xf5, 0x3, 0x0, "752c86", 0x3, 0x3a}, {@none, 0x20, 0x84, 0xdb, "97820d", 0x5, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x0, 0x7, "71bd61", 0x5, 0xfc}]}}}, 0x31) (async) 20:26:30 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 32) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) io_uring_enter(0xffffffffffffffff, 0x558c, 0x6c47, 0x39, &(0x7f0000000080)={[0x4]}, 0x8) 20:26:30 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="79a3a4e9e8a3a1e00add433005f96e934c16230cffa30f58c0d6fd8e2a467b86a6e7b7c0f5d74056db84c52f526adf32f48c266b3223cdee825ed1094809288d9e6396d72cabf6b6146967f4151e2020771e423357f8f0fa275400d1d78dff9cc9dd7264809155ece31b912bc7e9e2a6c6ec1399454bb6a53e64bb2f7e4d450cc1d4a46d726fad5d9cb9fd4f8c1060dab280c9e157a9ec8f154d65dbd4989c1d2a9764cef37f5c7bbb5a0ca676aa9154243adc2e7789c3c22b816532afe557933f12bb642e9d"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@none, 0x5b, 0x9, 0x3, "c76d92", 0x7, 0xff}, {@none, 0x7, 0x1, 0x8, "15779e", 0x7, 0x2}, {@any, 0x8c, 0x9, 0x4, "1319b0", 0x3f, 0x5}, {@any, 0x80, 0x20, 0x81, "c81a00", 0x4, 0x9}, {@any, 0x0, 0x2, 0x97, "c84496", 0x1000, 0x8}, {@none, 0x5, 0x0, 0x7f, "78efdd", 0x2}, {@any, 0xfb, 0x7, 0x7f, "a95a51", 0x0, 0x1}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa9}, "cff4ab9add5e972b2a3a946da61c6a4db5ad7ba4c53ba70af8226e366aea9e9b08434f2d9548578edb23665525cab96c965054cce01774d4ad58bb75de5c229aed447cac90c10cf07625aa9235d48f060c2c468550458f170dbca4e80c80e445834b5e9f777447ec8f9fe2a676a852c069f5e3f7fac302ed0197b364ca819d30e4e4764edd19d4e9bcc41892b9794d94b67d1d4ea7c5135ae1010a8b07b722427cb58a98770df3fa6c"}, 0xad) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0xf5, 0x3, 0x0, "752c86", 0x3, 0x3a}, {@none, 0x20, 0x84, 0xdb, "97820d", 0x5, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x0, 0x7, "71bd61", 0x5, 0xfc}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="79a3a4e9e8a3a1e00add433005f96e934c16230cffa30f58c0d6fd8e2a467b86a6e7b7c0f5d74056db84c52f526adf32f48c266b3223cdee825ed1094809288d9e6396d72cabf6b6146967f4151e2020771e423357f8f0fa275400d1d78dff9cc9dd7264809155ece31b912bc7e9e2a6c6ec1399454bb6a53e64bb2f7e4d450cc1d4a46d726fad5d9cb9fd4f8c1060dab280c9e157a9ec8f154d65dbd4989c1d2a9764cef37f5c7bbb5a0ca676aa9154243adc2e7789c3c22b816532afe557933f12bb642e9d"], 0x6) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@none, 0x5b, 0x9, 0x3, "c76d92", 0x7, 0xff}, {@none, 0x7, 0x1, 0x8, "15779e", 0x7, 0x2}, {@any, 0x8c, 0x9, 0x4, "1319b0", 0x3f, 0x5}, {@any, 0x80, 0x20, 0x81, "c81a00", 0x4, 0x9}, {@any, 0x0, 0x2, 0x97, "c84496", 0x1000, 0x8}, {@none, 0x5, 0x0, 0x7f, "78efdd", 0x2}, {@any, 0xfb, 0x7, 0x7f, "a95a51", 0x0, 0x1}]}}}, 0x6d) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa9}, "cff4ab9add5e972b2a3a946da61c6a4db5ad7ba4c53ba70af8226e366aea9e9b08434f2d9548578edb23665525cab96c965054cce01774d4ad58bb75de5c229aed447cac90c10cf07625aa9235d48f060c2c468550458f170dbca4e80c80e445834b5e9f777447ec8f9fe2a676a852c069f5e3f7fac302ed0197b364ca819d30e4e4764edd19d4e9bcc41892b9794d94b67d1d4ea7c5135ae1010a8b07b722427cb58a98770df3fa6c"}, 0xad) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0xf5, 0x3, 0x0, "752c86", 0x3, 0x3a}, {@none, 0x20, 0x84, 0xdb, "97820d", 0x5, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x0, 0x7, "71bd61", 0x5, 0xfc}]}}}, 0x31) (async) 20:26:31 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='T5'], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x12}, {0xb0, 0x1, 0x3, 0xda75, [0x829d, 0xf2, 0xffff, 0x1, 0x9f5]}}}}, 0x1f) 20:26:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:31 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x8171, 0x10, 0xfffffffc}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:31 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='T5'], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x12}, {0xb0, 0x1, 0x3, 0xda75, [0x829d, 0xf2, 0xffff, 0x1, 0x9f5]}}}}, 0x1f) 20:26:31 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r5 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r5, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r4, 0x0, 0x0}, 0x5) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x2}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r4, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:31 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB='T5'], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x12}, {0xb0, 0x1, 0x3, 0xda75, [0x829d, 0xf2, 0xffff, 0x1, 0x9f5]}}}}, 0x1f) 20:26:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:31 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x8171, 0x10, 0xfffffffc}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:31 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r2, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) sendfile(r0, r0, &(0x7f0000000180)=0x4, 0x3) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x0, 0x25dfdbff}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc8a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdfa7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6991}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3fe76b95}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0xb8}}, 0x80) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) 20:26:31 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 64) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x8171, 0x10, 0xfffffffc}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:31 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r5 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r5, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r4, 0x0, 0x0}, 0x5) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r4, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) [ 1560.888842][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:31 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_complete(0x0) r2 = syz_io_uring_setup(0x5d5, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x153, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r6, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="588a0996bf9b7fb522bd236c463ccf560fe48a2cf57b12a9e794b5a6cb747243ee79c401851d6b27e208e4ee6472f7f3c46390cfba9f0523857fd6d7e08f669f119658cdfd45f590229fcfc8a50725ec94fdadf42b9714f238a8c1bcfb83b234061e0c4256a443ad39e07270b5839d792ef9b2052cd6a9e184d9db3544c19ee0470c75683a9566af7309decc8b55d0c8b9e81ea12debc620a8723aaedb0bb0e24be968a0c129fb8010bd3b25e42e745084ee635bcd21863a97cda1dd794b62c8defedf2a4e942777d7b8", 0xca}], 0x1) pwritev2(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000003c0)="2ad05b51732c25c3f049a4da0455a11355fdbbe7d19d11457fb8f0a522ae5329878e1be69730950d904483cb3e8807805a6562f8105d7d79133bf57722758e8a3f662a4124e9428d5b9943f610c876e124c0265bb6fa52da96017024b7b802b77120579691032172c67a0a923411f850bcf1aa5863e994559dbf848e45f6c60d790b3a29ddcb8c0c325313c01f606f3029604694d4bf1fa2f861e12e94586dd91f06c03c520beccc947a701ad115fbf5aa9b0403cdd3a86392a63be38d02a0a3e7a114e2f9c512d8734807a3e791905ca1d7940b741ed6a0b062ef09844d9dd34e1aa3b9fdcf40da53e1045d39671d5c5d37a5", 0xf3}, {&(0x7f00000002c0)="b452f763bac14bf97ff275744df9fa7ccf1604fd31591132562a6949a38cbff1050cd27031dccc618b7647fdbed11d9cf59536bdf27c62e4926c8074a162fba26fe3c58a1f06a00424fe183d352e2a67194a8ed19d5d8efef12fae06433b9f5a114a1cc8e2354a66ab54877090cd166521dab420be2675ae0eb9eaa39d2034", 0x7f}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="427ef59d423532502c9b158fd602b0b7bcbe4212f2b24b1e19d87b8efcfa9ce60f3cad0a13a16019a4afe19ce2e9ce3cd38934c16cb9cfdc75155e459ed1aa4f036ef80b639efd289836624faeb0e529dde1efb5dde54bfd96574665ae6f2a38193be3822bc4dbefe95e16dc13a9dbf9ff6902", 0x73}, {&(0x7f0000000580)="f07f02f5e09b7049298d625db51955d027839952fa4db53001dba78ff98d1d93d6c41949feb7dc8f40542603", 0x2c}, {&(0x7f00000005c0)="81e8de849f342c39391fd060d08eafb9593ea6f13327b3354b826586fe447188a4734020029845c1ddf53eee224d79f5f200a19034c6c6ad0822664a21a6f21c000a57b768c51e0194c0a3e68bec7900514258626b28aaa092a4c6e1d5c8d89547068a3551cad0b945061fb2", 0x6c}, {&(0x7f0000000640)="f8a8982a608a198ea311f827d9324dcc5259dd8d43031b08e9953e92f6d8b28e2ed3c8bbcf9e02bb32e35af3f48c8ceb338d11666d7936d10b18dc3d84146748c75549558b82cbb8ed6e35736fd3a8fc2ee92074da62e353980283ea587aaa13ab8c0a70c4a97eb9d5748b098d57d6dbf691ed2cd20e", 0x76}, {&(0x7f00000006c0)="ebba435f7759aac4f1d42b506cfb5ddf5b6ce468a92f9c74bea8b9bdde5cd72a2596e43cb89347d14315f352a275d5dc", 0x30}], 0x8, 0x0, 0x4, 0x1c) io_uring_enter(r2, 0x450a, 0x1, 0x6, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r7 = dup(r0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_SHUTDOWN={0x22, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0x1) 20:26:31 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r2, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) (async) sendfile(r0, r0, &(0x7f0000000180)=0x4, 0x3) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x0, 0x25dfdbff}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc8a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdfa7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6991}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3fe76b95}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0xb8}}, 0x80) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) [ 1561.264160][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:32 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r2, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) sendfile(r0, r0, &(0x7f0000000180)=0x4, 0x3) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x0, 0x25dfdbff}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc8a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdfa7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6991}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3fe76b95}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0xb8}}, 0x80) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) 20:26:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:32 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xaa, 0xaa, 0x3, [@datasec={0x4, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x9012, 0x3ff}, {0x3, 0xeac2, 0xffffffff}], "a0b8"}, @fwd={0x5}, @ptr={0x5}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x1a, 0x0, 0x15, 0x5}, @fwd={0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x1}]}, @union={0x8, 0x1, 0x0, 0x5, 0x0, 0x2, [{0x1, 0x5, 0x7}]}, @const={0xc, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x8}}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/196, 0xc7, 0xc4, 0x1}, 0x20) flock(r0, 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04030bb866c7de78ae52c6102242bb10d1ffa5dff7be358837efa5dead47df45458bb86eb59e2d84f7137cccb626b7cfb589814fc7dda0baedc082637192d8149a83671e68187026986c2fb496388d013c4afa47c276771ffee8436f6539df7f3c40d7c2018e21d7445e172e88624052155ad8093f0479e5e7d9b989690bdecad63d69243ebb4ecf1a459dbc8fde1da69ef407936cc888e4c4289564d1d5fb852e2dbfae112f7b3b5c98610fd0f4dc2e315711b31be1"], 0x6) 20:26:32 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r5 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r5, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r4, 0x0, 0x0}, 0x5) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x2}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r4, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:32 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xaa, 0xaa, 0x3, [@datasec={0x4, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x9012, 0x3ff}, {0x3, 0xeac2, 0xffffffff}], "a0b8"}, @fwd={0x5}, @ptr={0x5}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x1a, 0x0, 0x15, 0x5}, @fwd={0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x1}]}, @union={0x8, 0x1, 0x0, 0x5, 0x0, 0x2, [{0x1, 0x5, 0x7}]}, @const={0xc, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x8}}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/196, 0xc7, 0xc4, 0x1}, 0x20) flock(r0, 0x1) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04030bb866c7de78ae52c6102242bb10d1ffa5dff7be358837efa5dead47df45458bb86eb59e2d84f7137cccb626b7cfb589814fc7dda0baedc082637192d8149a83671e68187026986c2fb496388d013c4afa47c276771ffee8436f6539df7f3c40d7c2018e21d7445e172e88624052155ad8093f0479e5e7d9b989690bdecad63d69243ebb4ecf1a459dbc8fde1da69ef407936cc888e4c4289564d1d5fb852e2dbfae112f7b3b5c98610fd0f4dc2e315711b31be1"], 0x6) [ 1561.632950][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:32 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r5 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r5, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r4, 0x0, 0x0}, 0x5) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r4, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:32 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xaa, 0xaa, 0x3, [@datasec={0x4, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x9012, 0x3ff}, {0x3, 0xeac2, 0xffffffff}], "a0b8"}, @fwd={0x5}, @ptr={0x5}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x1a, 0x0, 0x15, 0x5}, @fwd={0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x1}]}, @union={0x8, 0x1, 0x0, 0x5, 0x0, 0x2, [{0x1, 0x5, 0x7}]}, @const={0xc, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x8}}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/196, 0xc7, 0xc4, 0x1}, 0x20) flock(r0, 0x1) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04030bb866c7de78ae52c6102242bb10d1ffa5dff7be358837efa5dead47df45458bb86eb59e2d84f7137cccb626b7cfb589814fc7dda0baedc082637192d8149a83671e68187026986c2fb496388d013c4afa47c276771ffee8436f6539df7f3c40d7c2018e21d7445e172e88624052155ad8093f0479e5e7d9b989690bdecad63d69243ebb4ecf1a459dbc8fde1da69ef407936cc888e4c4289564d1d5fb852e2dbfae112f7b3b5c98610fd0f4dc2e315711b31be1"], 0x6) 20:26:32 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_complete(0x0) r2 = syz_io_uring_setup(0x5d5, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x153, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r6, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="588a0996bf9b7fb522bd236c463ccf560fe48a2cf57b12a9e794b5a6cb747243ee79c401851d6b27e208e4ee6472f7f3c46390cfba9f0523857fd6d7e08f669f119658cdfd45f590229fcfc8a50725ec94fdadf42b9714f238a8c1bcfb83b234061e0c4256a443ad39e07270b5839d792ef9b2052cd6a9e184d9db3544c19ee0470c75683a9566af7309decc8b55d0c8b9e81ea12debc620a8723aaedb0bb0e24be968a0c129fb8010bd3b25e42e745084ee635bcd21863a97cda1dd794b62c8defedf2a4e942777d7b8", 0xca}], 0x1) pwritev2(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000003c0)="2ad05b51732c25c3f049a4da0455a11355fdbbe7d19d11457fb8f0a522ae5329878e1be69730950d904483cb3e8807805a6562f8105d7d79133bf57722758e8a3f662a4124e9428d5b9943f610c876e124c0265bb6fa52da96017024b7b802b77120579691032172c67a0a923411f850bcf1aa5863e994559dbf848e45f6c60d790b3a29ddcb8c0c325313c01f606f3029604694d4bf1fa2f861e12e94586dd91f06c03c520beccc947a701ad115fbf5aa9b0403cdd3a86392a63be38d02a0a3e7a114e2f9c512d8734807a3e791905ca1d7940b741ed6a0b062ef09844d9dd34e1aa3b9fdcf40da53e1045d39671d5c5d37a5", 0xf3}, {&(0x7f00000002c0)="b452f763bac14bf97ff275744df9fa7ccf1604fd31591132562a6949a38cbff1050cd27031dccc618b7647fdbed11d9cf59536bdf27c62e4926c8074a162fba26fe3c58a1f06a00424fe183d352e2a67194a8ed19d5d8efef12fae06433b9f5a114a1cc8e2354a66ab54877090cd166521dab420be2675ae0eb9eaa39d2034", 0x7f}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="427ef59d423532502c9b158fd602b0b7bcbe4212f2b24b1e19d87b8efcfa9ce60f3cad0a13a16019a4afe19ce2e9ce3cd38934c16cb9cfdc75155e459ed1aa4f036ef80b639efd289836624faeb0e529dde1efb5dde54bfd96574665ae6f2a38193be3822bc4dbefe95e16dc13a9dbf9ff6902", 0x73}, {&(0x7f0000000580)="f07f02f5e09b7049298d625db51955d027839952fa4db53001dba78ff98d1d93d6c41949feb7dc8f40542603", 0x2c}, {&(0x7f00000005c0)="81e8de849f342c39391fd060d08eafb9593ea6f13327b3354b826586fe447188a4734020029845c1ddf53eee224d79f5f200a19034c6c6ad0822664a21a6f21c000a57b768c51e0194c0a3e68bec7900514258626b28aaa092a4c6e1d5c8d89547068a3551cad0b945061fb2", 0x6c}, {&(0x7f0000000640)="f8a8982a608a198ea311f827d9324dcc5259dd8d43031b08e9953e92f6d8b28e2ed3c8bbcf9e02bb32e35af3f48c8ceb338d11666d7936d10b18dc3d84146748c75549558b82cbb8ed6e35736fd3a8fc2ee92074da62e353980283ea587aaa13ab8c0a70c4a97eb9d5748b098d57d6dbf691ed2cd20e", 0x76}, {&(0x7f00000006c0)="ebba435f7759aac4f1d42b506cfb5ddf5b6ce468a92f9c74bea8b9bdde5cd72a2596e43cb89347d14315f352a275d5dc", 0x30}], 0x8, 0x0, 0x4, 0x1c) (async) io_uring_enter(r2, 0x450a, 0x1, 0x6, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r7 = dup(r0) (async) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_SHUTDOWN={0x22, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0x1) [ 1561.795468][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:32 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_complete(0x0) r2 = syz_io_uring_setup(0x5d5, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x153, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r6, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="588a0996bf9b7fb522bd236c463ccf560fe48a2cf57b12a9e794b5a6cb747243ee79c401851d6b27e208e4ee6472f7f3c46390cfba9f0523857fd6d7e08f669f119658cdfd45f590229fcfc8a50725ec94fdadf42b9714f238a8c1bcfb83b234061e0c4256a443ad39e07270b5839d792ef9b2052cd6a9e184d9db3544c19ee0470c75683a9566af7309decc8b55d0c8b9e81ea12debc620a8723aaedb0bb0e24be968a0c129fb8010bd3b25e42e745084ee635bcd21863a97cda1dd794b62c8defedf2a4e942777d7b8", 0xca}], 0x1) pwritev2(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000003c0)="2ad05b51732c25c3f049a4da0455a11355fdbbe7d19d11457fb8f0a522ae5329878e1be69730950d904483cb3e8807805a6562f8105d7d79133bf57722758e8a3f662a4124e9428d5b9943f610c876e124c0265bb6fa52da96017024b7b802b77120579691032172c67a0a923411f850bcf1aa5863e994559dbf848e45f6c60d790b3a29ddcb8c0c325313c01f606f3029604694d4bf1fa2f861e12e94586dd91f06c03c520beccc947a701ad115fbf5aa9b0403cdd3a86392a63be38d02a0a3e7a114e2f9c512d8734807a3e791905ca1d7940b741ed6a0b062ef09844d9dd34e1aa3b9fdcf40da53e1045d39671d5c5d37a5", 0xf3}, {&(0x7f00000002c0)="b452f763bac14bf97ff275744df9fa7ccf1604fd31591132562a6949a38cbff1050cd27031dccc618b7647fdbed11d9cf59536bdf27c62e4926c8074a162fba26fe3c58a1f06a00424fe183d352e2a67194a8ed19d5d8efef12fae06433b9f5a114a1cc8e2354a66ab54877090cd166521dab420be2675ae0eb9eaa39d2034", 0x7f}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="427ef59d423532502c9b158fd602b0b7bcbe4212f2b24b1e19d87b8efcfa9ce60f3cad0a13a16019a4afe19ce2e9ce3cd38934c16cb9cfdc75155e459ed1aa4f036ef80b639efd289836624faeb0e529dde1efb5dde54bfd96574665ae6f2a38193be3822bc4dbefe95e16dc13a9dbf9ff6902", 0x73}, {&(0x7f0000000580)="f07f02f5e09b7049298d625db51955d027839952fa4db53001dba78ff98d1d93d6c41949feb7dc8f40542603", 0x2c}, {&(0x7f00000005c0)="81e8de849f342c39391fd060d08eafb9593ea6f13327b3354b826586fe447188a4734020029845c1ddf53eee224d79f5f200a19034c6c6ad0822664a21a6f21c000a57b768c51e0194c0a3e68bec7900514258626b28aaa092a4c6e1d5c8d89547068a3551cad0b945061fb2", 0x6c}, {&(0x7f0000000640)="f8a8982a608a198ea311f827d9324dcc5259dd8d43031b08e9953e92f6d8b28e2ed3c8bbcf9e02bb32e35af3f48c8ceb338d11666d7936d10b18dc3d84146748c75549558b82cbb8ed6e35736fd3a8fc2ee92074da62e353980283ea587aaa13ab8c0a70c4a97eb9d5748b098d57d6dbf691ed2cd20e", 0x76}, {&(0x7f00000006c0)="ebba435f7759aac4f1d42b506cfb5ddf5b6ce468a92f9c74bea8b9bdde5cd72a2596e43cb89347d14315f352a275d5dc", 0x30}], 0x8, 0x0, 0x4, 0x1c) io_uring_enter(r2, 0x450a, 0x1, 0x6, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r7 = dup(r0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_SHUTDOWN={0x22, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_complete(0x0) (async) syz_io_uring_setup(0x5d5, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x153, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r5) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r6, 0x0, 0x0) (async) openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="588a0996bf9b7fb522bd236c463ccf560fe48a2cf57b12a9e794b5a6cb747243ee79c401851d6b27e208e4ee6472f7f3c46390cfba9f0523857fd6d7e08f669f119658cdfd45f590229fcfc8a50725ec94fdadf42b9714f238a8c1bcfb83b234061e0c4256a443ad39e07270b5839d792ef9b2052cd6a9e184d9db3544c19ee0470c75683a9566af7309decc8b55d0c8b9e81ea12debc620a8723aaedb0bb0e24be968a0c129fb8010bd3b25e42e745084ee635bcd21863a97cda1dd794b62c8defedf2a4e942777d7b8", 0xca}], 0x1) (async) pwritev2(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000003c0)="2ad05b51732c25c3f049a4da0455a11355fdbbe7d19d11457fb8f0a522ae5329878e1be69730950d904483cb3e8807805a6562f8105d7d79133bf57722758e8a3f662a4124e9428d5b9943f610c876e124c0265bb6fa52da96017024b7b802b77120579691032172c67a0a923411f850bcf1aa5863e994559dbf848e45f6c60d790b3a29ddcb8c0c325313c01f606f3029604694d4bf1fa2f861e12e94586dd91f06c03c520beccc947a701ad115fbf5aa9b0403cdd3a86392a63be38d02a0a3e7a114e2f9c512d8734807a3e791905ca1d7940b741ed6a0b062ef09844d9dd34e1aa3b9fdcf40da53e1045d39671d5c5d37a5", 0xf3}, {&(0x7f00000002c0)="b452f763bac14bf97ff275744df9fa7ccf1604fd31591132562a6949a38cbff1050cd27031dccc618b7647fdbed11d9cf59536bdf27c62e4926c8074a162fba26fe3c58a1f06a00424fe183d352e2a67194a8ed19d5d8efef12fae06433b9f5a114a1cc8e2354a66ab54877090cd166521dab420be2675ae0eb9eaa39d2034", 0x7f}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="427ef59d423532502c9b158fd602b0b7bcbe4212f2b24b1e19d87b8efcfa9ce60f3cad0a13a16019a4afe19ce2e9ce3cd38934c16cb9cfdc75155e459ed1aa4f036ef80b639efd289836624faeb0e529dde1efb5dde54bfd96574665ae6f2a38193be3822bc4dbefe95e16dc13a9dbf9ff6902", 0x73}, {&(0x7f0000000580)="f07f02f5e09b7049298d625db51955d027839952fa4db53001dba78ff98d1d93d6c41949feb7dc8f40542603", 0x2c}, {&(0x7f00000005c0)="81e8de849f342c39391fd060d08eafb9593ea6f13327b3354b826586fe447188a4734020029845c1ddf53eee224d79f5f200a19034c6c6ad0822664a21a6f21c000a57b768c51e0194c0a3e68bec7900514258626b28aaa092a4c6e1d5c8d89547068a3551cad0b945061fb2", 0x6c}, {&(0x7f0000000640)="f8a8982a608a198ea311f827d9324dcc5259dd8d43031b08e9953e92f6d8b28e2ed3c8bbcf9e02bb32e35af3f48c8ceb338d11666d7936d10b18dc3d84146748c75549558b82cbb8ed6e35736fd3a8fc2ee92074da62e353980283ea587aaa13ab8c0a70c4a97eb9d5748b098d57d6dbf691ed2cd20e", 0x76}, {&(0x7f00000006c0)="ebba435f7759aac4f1d42b506cfb5ddf5b6ce468a92f9c74bea8b9bdde5cd72a2596e43cb89347d14315f352a275d5dc", 0x30}], 0x8, 0x0, 0x4, 0x1c) (async) io_uring_enter(r2, 0x450a, 0x1, 0x6, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) (async) dup(r0) (async) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_SHUTDOWN={0x22, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffff) (async) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0x1) (async) 20:26:32 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0403a543b26ea64156c0ea7509888d6b5452f7314be29536594b81a27d557f6b7237bdfb81f7e0be3196a470c030a13661835bb1048eb98d6b35648f316296f558f7fbe05b7c77d76720bd4d62c8eb37030f37a76903ba7839277b2583b747"], 0x6) [ 1561.913094][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:32 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0403a543b26ea64156c0ea7509888d6b5452f7314be29536594b81a27d557f6b7237bdfb81f7e0be3196a470c030a13661835bb1048eb98d6b35648f316296f558f7fbe05b7c77d76720bd4d62c8eb37030f37a76903ba7839277b2583b747"], 0x6) [ 1562.006290][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:33 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0403a543b26ea64156c0ea7509888d6b5452f7314be29536594b81a27d557f6b7237bdfb81f7e0be3196a470c030a13661835bb1048eb98d6b35648f316296f558f7fbe05b7c77d76720bd4d62c8eb37030f37a76903ba7839277b2583b747"], 0x6) [ 1562.150002][ T5017] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:33 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000000c0)={0x5, r1, 0x80000}) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r6, 0x0, 0x0) write$6lowpan_enable(r6, &(0x7f0000000100)='0', 0x1) io_uring_enter(r1, 0x4e52, 0x54a8, 0x1d, &(0x7f0000000080), 0x8) [ 1562.311066][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:33 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r5 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r5, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r4, 0x0, 0x0}, 0x5) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x2}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r4, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:33 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="020403"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4e}, "0554fa1d3f181646e556dafe9d1d2282fc4ac9d2c82e708849a6c9e4eface62992019b81152a59a7f491b1ad1953a25d16b9868f3940fc7912dc92b5547ac167df693d1abf7a5c7455313eb7a8d1"}, 0x52) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x81, 0x1}}}}, 0x11) [ 1562.463963][T12246] Bluetooth: hci0: ACL packet for unknown connection handle 772 [ 1562.472523][T12246] [ 1562.474855][T12246] ===================================== [ 1562.480382][T12246] WARNING: bad unlock balance detected! [ 1562.485912][T12246] 6.3.0-syzkaller-00436-g173ea743bf7a #0 Not tainted [ 1562.492579][T12246] ------------------------------------- [ 1562.498103][T12246] kworker/u5:0/12246 is trying to release lock (&conn->chan_lock) at: [ 1562.506238][T12246] [] l2cap_recv_frame+0x85a4/0x9390 [ 1562.513085][T12246] but there are no more locks to release! [ 1562.518781][T12246] [ 1562.518781][T12246] other info that might help us debug this: [ 1562.526820][T12246] 2 locks held by kworker/u5:0/12246: [ 1562.532181][T12246] #0: ffff888047971138 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1562.542563][T12246] #1: ffffc9000c7ffda8 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1562.554225][T12246] [ 1562.554225][T12246] stack backtrace: [ 1562.560285][T12246] CPU: 1 PID: 12246 Comm: kworker/u5:0 Not tainted 6.3.0-syzkaller-00436-g173ea743bf7a #0 [ 1562.570169][T12246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1562.580221][T12246] Workqueue: hci0 hci_rx_work [ 1562.585004][T12246] Call Trace: [ 1562.588277][T12246] [ 1562.591203][T12246] dump_stack_lvl+0xd9/0x150 [ 1562.595798][T12246] lock_release+0x4f1/0x670 [ 1562.600301][T12246] ? l2cap_recv_frame+0x85a4/0x9390 [ 1562.605507][T12246] ? lock_downgrade+0x690/0x690 [ 1562.610357][T12246] ? __mutex_lock+0x231/0x1350 [ 1562.615170][T12246] __mutex_unlock_slowpath+0x99/0x5e0 [ 1562.620543][T12246] ? wait_for_completion_io_timeout+0x20/0x20 [ 1562.626620][T12246] ? __lock_acquire+0x1916/0x5df0 [ 1562.631643][T12246] l2cap_recv_frame+0x85a4/0x9390 [ 1562.636681][T12246] ? hci_rx_work+0x6e5/0x1340 [ 1562.641384][T12246] ? lock_downgrade+0x690/0x690 [ 1562.646232][T12246] ? rcu_is_watching+0x12/0xb0 [ 1562.651001][T12246] ? l2cap_info_timeout+0x80/0x80 [ 1562.656049][T12246] ? __mutex_lock+0x231/0x1350 [ 1562.660847][T12246] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 1562.666482][T12246] ? wait_for_completion_io_timeout+0x20/0x20 [ 1562.672564][T12246] ? hci_rx_work+0x6b9/0x1340 [ 1562.677250][T12246] ? hci_conn_enter_active_mode+0x129/0x360 [ 1562.683183][T12246] ? lock_downgrade+0x690/0x690 [ 1562.688030][T12246] ? hci_conn_check_link_mode+0x550/0x550 [ 1562.693753][T12246] l2cap_recv_acldata+0xa80/0xbf0 [ 1562.698817][T12246] hci_rx_work+0x709/0x1340 [ 1562.703332][T12246] process_one_work+0x991/0x15c0 [ 1562.708273][T12246] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1562.713647][T12246] ? spin_bug+0x1c0/0x1c0 [ 1562.717996][T12246] ? _raw_spin_lock_irq+0x45/0x50 [ 1562.723027][T12246] worker_thread+0x669/0x1090 [ 1562.727704][T12246] ? __kthread_parkme+0x163/0x220 [ 1562.732721][T12246] ? process_one_work+0x15c0/0x15c0 [ 1562.737919][T12246] kthread+0x33e/0x440 [ 1562.742069][T12246] ? kthread_complete_and_exit+0x40/0x40 [ 1562.747698][T12246] ret_from_fork+0x1f/0x30 [ 1562.752122][T12246] 20:26:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:33 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r4 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r4, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r3, 0x0, 0x0}, 0x5) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup3(0xffffffffffffffff, r3, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:33 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="020403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4e}, "0554fa1d3f181646e556dafe9d1d2282fc4ac9d2c82e708849a6c9e4eface62992019b81152a59a7f491b1ad1953a25d16b9868f3940fc7912dc92b5547ac167df693d1abf7a5c7455313eb7a8d1"}, 0x52) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x81, 0x1}}}}, 0x11) 20:26:33 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="020403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4e}, "0554fa1d3f181646e556dafe9d1d2282fc4ac9d2c82e708849a6c9e4eface62992019b81152a59a7f491b1ad1953a25d16b9868f3940fc7912dc92b5547ac167df693d1abf7a5c7455313eb7a8d1"}, 0x52) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x81, 0x1}}}}, 0x11) [ 1562.885372][T12246] Bluetooth: hci0: ACL packet for unknown connection handle 772 20:26:33 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x52, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="6942bf9dec3bee0c000000000000fda58f04baa6451d4a71f99625527601fee22f46ca13ba51406ebdec2940a5f1edacd10008223f712a3db28e081541d56f12d2ee8190bd0a7b95decaddc6e509d1482f436b57258651df2bf371476b5009603378be3b24c9cef316bb3f9269e6f8623cb9f8ac41f0269a9bbce717e9dc2d2e4286dc1c7ab6dffacfae68dd997d2fa8d21bde639be2c8c7a63f20d19ce76555a208b001189c699329e28e2322b3721c7f18c390ebf7ef59393b948d2a94f5f2"], 0x6) [ 1562.953920][T12246] Bluetooth: hci0: ACL packet for unknown connection handle 772 20:26:34 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000000c0)={0x5, r1, 0x80000}) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r6, 0x0, 0x0) (async) getsockname$packet(r6, 0x0, 0x0) write$6lowpan_enable(r6, &(0x7f0000000100)='0', 0x1) (async) write$6lowpan_enable(r6, &(0x7f0000000100)='0', 0x1) io_uring_enter(r1, 0x4e52, 0x54a8, 0x1d, &(0x7f0000000080), 0x8) (async) io_uring_enter(r1, 0x4e52, 0x54a8, 0x1d, &(0x7f0000000080), 0x8) 20:26:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r4 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r4, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r3, 0x0, 0x0}, 0x5) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x2}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup3(0xffffffffffffffff, r3, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:34 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r4 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r4, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r3, 0x0, 0x0}, 0x5) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup3(0xffffffffffffffff, r3, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:34 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x52, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x52, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="6942bf9dec3bee0c000000000000fda58f04baa6451d4a71f99625527601fee22f46ca13ba51406ebdec2940a5f1edacd10008223f712a3db28e081541d56f12d2ee8190bd0a7b95decaddc6e509d1482f436b57258651df2bf371476b5009603378be3b24c9cef316bb3f9269e6f8623cb9f8ac41f0269a9bbce717e9dc2d2e4286dc1c7ab6dffacfae68dd997d2fa8d21bde639be2c8c7a63f20d19ce76555a208b001189c699329e28e2322b3721c7f18c390ebf7ef59393b948d2a94f5f2"], 0x6) 20:26:34 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x52, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x52, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="6942bf9dec3bee0c000000000000fda58f04baa6451d4a71f99625527601fee22f46ca13ba51406ebdec2940a5f1edacd10008223f712a3db28e081541d56f12d2ee8190bd0a7b95decaddc6e509d1482f436b57258651df2bf371476b5009603378be3b24c9cef316bb3f9269e6f8623cb9f8ac41f0269a9bbce717e9dc2d2e4286dc1c7ab6dffacfae68dd997d2fa8d21bde639be2c8c7a63f20d19ce76555a208b001189c699329e28e2322b3721c7f18c390ebf7ef59393b948d2a94f5f2"], 0x6) 20:26:34 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000000c0)={0x5, r1, 0x80000}) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r6, 0x0, 0x0) (async) write$6lowpan_enable(r6, &(0x7f0000000100)='0', 0x1) (async) io_uring_enter(r1, 0x4e52, 0x54a8, 0x1d, &(0x7f0000000080), 0x8) 20:26:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0xcdf9, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r5, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) fcntl$setflags(r5, 0x2, 0x1) 20:26:35 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x81}}}, 0xa) 20:26:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0xcdf9, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) dup(r0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r5, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto(r5, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) fcntl$setflags(r5, 0x2, 0x1) (async) fcntl$setflags(r5, 0x2, 0x1) 20:26:35 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x81}}}, 0xa) [ 1564.215488][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:35 executing program 0: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x81}}}, 0xa) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x81}}}, 0xa) (async) [ 1564.274527][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1564.364781][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1564.375986][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:35 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r4 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r4, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r3, 0x0, 0x0}, 0x5) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x2}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup3(0xffffffffffffffff, r3, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0xcdf9, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r5, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r5, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) fcntl$setflags(r5, 0x2, 0x1) 20:26:35 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r3, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendto$inet(r4, &(0x7f0000000140)="b4ed44e415c72a2a913ed2dd536c07ef84eb6e4291f5b614fe144adbe7b06d83d0adb49269802c12b1676a39ff57c32bee70016dc95e118562e5c4b81f4bf7de4b1d1465e8afbf321cacb35e346954281d5b21c0f19e8a6496a7ab090f522f8f1266db0032db3de40ff9437fc892d8b220153c51fb15a2ebb7c2f4019c6502ee5c01d8c4bec87d2f384e9ae09437e6ec79f75e84c0936ab6fdf2a5b6ddcd7b0b5fc13ef27c76e316778a41e5665a16f875ba6eaf8c8296a13e1ef56bd8dd1086", 0xc0, 0x801, &(0x7f0000000200)={0x2, 0x4e22, @multicast2}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/kernel', 0x40, 0x35) ioctl$KVM_DEASSIGN_PCI_DEVICE(r5, 0x4040ae72, &(0x7f0000000100)={0xa544, 0x3, 0x0, 0x6}) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x6) 20:26:35 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r4 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r4, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r3, 0x0, 0x0}, 0x5) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup3(0xffffffffffffffff, r3, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000a90001002cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="010007000e000c00e0fff3ff0800010063627300090001007072696f000000000c000100736b627072696f000600050004090000060005000009000006000500038800000600050003060000070001006d71000008000100647272000c00020008000100010400000b0001006d717072696f0000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000800}, 0x840) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x23) 20:26:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000a90001002cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="010007000e000c00e0fff3ff0800010063627300090001007072696f000000000c000100736b627072696f000600050004090000060005000009000006000500038800000600050003060000070001006d71000008000100647272000c00020008000100010400000b0001006d717072696f0000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000800}, 0x840) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x23) 20:26:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000a90001002cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="010007000e000c00e0fff3ff0800010063627300090001007072696f000000000c000100736b627072696f000600050004090000060005000009000006000500038800000600050003060000070001006d71000008000100647272000c00020008000100010400000b0001006d717072696f0000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000800}, 0x840) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x23) 20:26:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xffffffffffffffff, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:36 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xffffffffffffffff, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:36 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xffffffffffffffff, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r4 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r4, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r3, 0x0, 0x0}, 0x5) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x2}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup3(0xffffffffffffffff, r3, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:36 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) poll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x3000}, {r1, 0x4110}, {r0, 0x200}, {r2, 0x200}], 0x4, 0x1ff) r3 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = dup(r0) open_by_handle_at(r6, &(0x7f0000000080)=@ocfs2_parent={0x18, 0x2, {{0x7, 0x0, 0x400}, {0x1, 0x2b, 0x8}}}, 0xc164c0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) r12 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r12, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(r10, r11, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r12, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r13}}, 0x4) syz_io_uring_submit(r7, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x1011}, 0x0, {0x0, r13}}, 0x101) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) 20:26:36 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(0xffffffffffffffff, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) poll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x3000}, {r1, 0x4110}, {r0, 0x200}, {r2, 0x200}], 0x4, 0x1ff) r3 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r6 = dup(r0) open_by_handle_at(r6, &(0x7f0000000080)=@ocfs2_parent={0x18, 0x2, {{0x7, 0x0, 0x400}, {0x1, 0x2b, 0x8}}}, 0xc164c0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) (async) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) (async) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) (async) r12 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r12, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) (async) syz_io_uring_submit(r10, r11, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r12, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) (async) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r13}}, 0x4) syz_io_uring_submit(r7, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x1011}, 0x0, {0x0, r13}}, 0x101) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) 20:26:36 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r3, 0x0, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendto$inet(r4, &(0x7f0000000140)="b4ed44e415c72a2a913ed2dd536c07ef84eb6e4291f5b614fe144adbe7b06d83d0adb49269802c12b1676a39ff57c32bee70016dc95e118562e5c4b81f4bf7de4b1d1465e8afbf321cacb35e346954281d5b21c0f19e8a6496a7ab090f522f8f1266db0032db3de40ff9437fc892d8b220153c51fb15a2ebb7c2f4019c6502ee5c01d8c4bec87d2f384e9ae09437e6ec79f75e84c0936ab6fdf2a5b6ddcd7b0b5fc13ef27c76e316778a41e5665a16f875ba6eaf8c8296a13e1ef56bd8dd1086", 0xc0, 0x801, &(0x7f0000000200)={0x2, 0x4e22, @multicast2}, 0x10) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/kernel', 0x40, 0x35) ioctl$KVM_DEASSIGN_PCI_DEVICE(r5, 0x4040ae72, &(0x7f0000000100)={0xa544, 0x3, 0x0, 0x6}) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x6) 20:26:36 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:36 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r1, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) poll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x3000}, {r1, 0x4110}, {r0, 0x200}, {r2, 0x200}], 0x4, 0x1ff) r3 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = dup(r0) open_by_handle_at(r6, &(0x7f0000000080)=@ocfs2_parent={0x18, 0x2, {{0x7, 0x0, 0x400}, {0x1, 0x2b, 0x8}}}, 0xc164c0) syz_io_uring_setup(0x807af, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x807af, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000300)=0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}, 0x4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f00000002c0)=0x307a, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) (async) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) r12 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r12, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) syz_io_uring_submit(r10, r11, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r12, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) (async) syz_io_uring_submit(r10, r11, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r12, 0x0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r13}}, 0x4) syz_io_uring_submit(r7, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x1011}, 0x0, {0x0, r13}}, 0x101) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) 20:26:36 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r3, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendto$inet(r4, &(0x7f0000000140)="b4ed44e415c72a2a913ed2dd536c07ef84eb6e4291f5b614fe144adbe7b06d83d0adb49269802c12b1676a39ff57c32bee70016dc95e118562e5c4b81f4bf7de4b1d1465e8afbf321cacb35e346954281d5b21c0f19e8a6496a7ab090f522f8f1266db0032db3de40ff9437fc892d8b220153c51fb15a2ebb7c2f4019c6502ee5c01d8c4bec87d2f384e9ae09437e6ec79f75e84c0936ab6fdf2a5b6ddcd7b0b5fc13ef27c76e316778a41e5665a16f875ba6eaf8c8296a13e1ef56bd8dd1086", 0xc0, 0x801, &(0x7f0000000200)={0x2, 0x4e22, @multicast2}, 0x10) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/kernel', 0x40, 0x35) ioctl$KVM_DEASSIGN_PCI_DEVICE(r5, 0x4040ae72, &(0x7f0000000100)={0xa544, 0x3, 0x0, 0x6}) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x6) 20:26:36 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:36 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:36 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:36 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:37 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) (rerun: 32) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:37 executing program 0: r0 = socket(0x2, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @private=0xa010102}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) pipe2$watch_queue(&(0x7f0000000040), 0x80) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto(r2, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRES32=r0], 0x6) 20:26:37 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:37 executing program 0: r0 = socket(0x2, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @private=0xa010102}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) pipe2$watch_queue(&(0x7f0000000040), 0x80) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto(r2, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRES32=r0], 0x6) socket(0x2, 0x3, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @private=0xa010102}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) socket(0x2, 0x3, 0x100000001) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendto(r2, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRES32=r0], 0x6) (async) 20:26:37 executing program 0: r0 = socket(0x2, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @private=0xa010102}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) pipe2$watch_queue(&(0x7f0000000040), 0x80) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto(r2, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRES32=r0], 0x6) socket(0x2, 0x3, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @private=0xa010102}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) socket(0x2, 0x3, 0x100000001) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendto(r2, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRES32=r0], 0x6) (async) 20:26:37 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) dup(r0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x498101, 0x0) write$6lowpan_enable(r4, &(0x7f0000000100)='1', 0x1) 20:26:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:37 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:37 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r7, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:37 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:37 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/178, 0xb2}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000300)=""/70, 0x46}], 0x6, 0x0, 0x0, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000004c0)) fcntl$setownex(r0, 0xf, &(0x7f0000000400)={0x1, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0107"], 0x6) 20:26:37 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async, rerun: 64) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) dup(r0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x498101, 0x0) write$6lowpan_enable(r4, &(0x7f0000000100)='1', 0x1) 20:26:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:37 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/178, 0xb2}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000300)=""/70, 0x46}], 0x6, 0x0, 0x0, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000004c0)) fcntl$setownex(r0, 0xf, &(0x7f0000000400)={0x1, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0107"], 0x6) socket(0x2, 0x3, 0x100000001) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/178, 0xb2}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000300)=""/70, 0x46}], 0x6, 0x0, 0x0, 0x1) (async) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000004c0)) (async) fcntl$setownex(r0, 0xf, &(0x7f0000000400)={0x1, 0xffffffffffffffff}) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0107"], 0x6) (async) 20:26:37 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) dup(r0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x498101, 0x0) write$6lowpan_enable(r4, &(0x7f0000000100)='1', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x498101, 0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000100)='1', 0x1) (async) 20:26:37 executing program 0: socket(0x2, 0x3, 0x100000001) (async) r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/178, 0xb2}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000300)=""/70, 0x46}], 0x6, 0x0, 0x0, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000004c0)) fcntl$setownex(r0, 0xf, &(0x7f0000000400)={0x1, 0xffffffffffffffff}) (async) fcntl$setownex(r0, 0xf, &(0x7f0000000400)={0x1, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0107"], 0x6) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0107"], 0x6) 20:26:37 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:37 executing program 0: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc}, "45416f15196292c043f297c4"}, 0x10) [ 1567.144620][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:38 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:38 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x1, 0x3, 0x648d, 0x1, 0xfff}) r1 = syz_io_uring_setup(0x3028, &(0x7f0000000340)={0x0, 0x0, 0x400}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:38 executing program 0: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc}, "45416f15196292c043f297c4"}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc}, "45416f15196292c043f297c4"}, 0x10) (async) 20:26:38 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:38 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r7, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:38 executing program 0: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0403"], 0x6) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc}, "45416f15196292c043f297c4"}, 0x10) [ 1567.787065][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 [ 1567.797589][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:38 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x1, 0x3, 0x648d, 0x1, 0xfff}) r1 = syz_io_uring_setup(0x3028, &(0x7f0000000340)={0x0, 0x0, 0x400}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:38 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x1, 0x3, 0x648d, 0x1, 0xfff}) r1 = syz_io_uring_setup(0x3028, &(0x7f0000000340)={0x0, 0x0, 0x400}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) 20:26:38 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x11) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000040)=""/57) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="1813"], 0x6) [ 1567.840992][T12246] Bluetooth: hci0: unexpected event 0x03 length: 3 < 11 20:26:38 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r3, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000100)={0x80, 0x0, &(0x7f00000000c0)=[r3, r0, r2, r4, r0]}, 0x5) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) 20:26:38 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendto(r3, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000100)={0x80, 0x0, &(0x7f00000000c0)=[r3, r0, r2, r4, r0]}, 0x5) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) 20:26:39 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 20:26:39 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x100000000000000}) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:39 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r3, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000100)={0x80, 0x0, &(0x7f00000000c0)=[r3, r0, r2, r4, r0]}, 0x5) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) 20:26:39 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x11) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) (async) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000040)=""/57) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="1813"], 0x6) (rerun: 64) 20:26:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:39 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r7, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r6, 0x0, 0x0}, 0x5) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r2, r6, 0x0) 20:26:39 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"a7b8e9caf6209a8e09b94fe452b6cb34cf00ec7c0e1494243bf7b7af55490fee", r4, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"1704e06cb56ebed12c20ebee60b6054d", 0x0, 0x0, {0xff, 0x401}, {0x5, 0x100}, 0x7, [0x5, 0x6, 0x20e77549, 0x3, 0x100, 0x2, 0x2afbe319, 0x2, 0x7fffffffffffffff, 0x9, 0x1, 0x69ca630b, 0x9c13, 0x7f, 0x376, 0x8000000000000000]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000003c0)={{r5}, r6, 0x10, @inherit={0x50, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000100000000000000000800000000000009000000000000000e000000000000000300000000000000090000000000001f00"/80]}, @name="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"}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) r7 = socket(0x2, 0x3, 0x100000001) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r7, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r7) 20:26:39 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"a7b8e9caf6209a8e09b94fe452b6cb34cf00ec7c0e1494243bf7b7af55490fee", r4, 0xffffffffffffffff}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"1704e06cb56ebed12c20ebee60b6054d", 0x0, 0x0, {0xff, 0x401}, {0x5, 0x100}, 0x7, [0x5, 0x6, 0x20e77549, 0x3, 0x100, 0x2, 0x2afbe319, 0x2, 0x7fffffffffffffff, 0x9, 0x1, 0x69ca630b, 0x9c13, 0x7f, 0x376, 0x8000000000000000]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000003c0)={{r5}, r6, 0x10, @inherit={0x50, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000100000000000000000800000000000009000000000000000e000000000000000300000000000000090000000000001f00"/80]}, @name="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"}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) r7 = socket(0x2, 0x3, 0x100000001) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r7, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) (async) sendto$inet(r7, &(0x7f0000000280)="66c019ff39555eb4998951dfabcc60427dfe3ded1b97aae8da35", 0x1a, 0x0, 0x0, 0x0) (async) ioctl$LOOP_SET_FD(r4, 0x4c00, r7) 20:26:39 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x11) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r1, 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000040)=""/57) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="1813"], 0x6) 20:26:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x600000, 0x17) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, &(0x7f0000000080)='./bus\x00', 0x2, 0x40) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f00000003c0), 0x1000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r5, 0x0, 0x0}, 0x5) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x2}) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) dup3(r1, r5, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 20:26:39 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) (async) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) dup(r0) (async) r4 = dup(r0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"a7b8e9caf6209a8e09b94fe452b6cb34cf00ec7c0e1494243bf7b7af55490fee", r4, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"1704e06cb56ebed12c20ebee60b6054d", 0x0, 0x0, {0xff, 0x401}, {0x5, 0x100}, 0x7, [0x5, 0x6, 0x20e77549, 0x3, 0x100, 0x2, 0x2afbe319, 0x2, 0x7fffffffffffffff, 0x9, 0x1, 0x69ca630b, 0x9c13, 0x7f, 0x376, 0x8000000000000000]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"1704e06cb56ebed12c20ebee60b6054d", 0x0, 0x0, {0xff, 0x401}, {0x5, 0x100}, 0x7, [0x5, 0x6, 0x20e77549, 0x3, 0x100, 0x2, 0x2afbe319, 0x2, 0x7fffffffffffffff, 0x9, 0x1, 0x69ca630b, 0x9c13, 0x7f, 0x376, 0x8000000000000000]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000003c0)={{r5}, r6, 0x10, @inherit={0x50, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000100000000000000000800000000000009000000000000000e000000000000000300000000000000090000000000001f00"/80]}, @name="2dca6cadbef6a32c47f0ac971774b1000a6c885c1b52d86b4079311217873df341370467c3655a38a9acefc8aea5c8d62cbfb54da32bda0c5d8a907c6c923add0f402d8d4848344b9e71d6ba8647a8a6c42762926f9198e06952d7b1024c35239efb3900e844809ec74914a2d2dee191a3d3d49e6ace4dec7af192848863a4aca3bd4a3ff9faffe08fd26052cbbf9150c472892357600af2978da57d56461857b08806f9f89edd89b2dc6fd65b09313572ef4cdbc99453179c2cd5330c01a244c7fefbf0a693ae6fd52bfb1cbf903449f5dbbca7d28ab956abac6830496e8cf5a43447e920ecf9c75fc21441062b824039b779155eee3d504ae4e817291a2a61a126e5bab801448c9f41f72b7bc7112840c887d0e68d94a665f2de91c789c3a614de2984a4974f71e3b9653d11e80c7b1b7b0310a4c8a5e4a2a2adb9c4d777411faf632a444ae4c3d654aa2a0a754c89c262f7f8c2184920c8ac866adec23f5f551a70728189a6d7ed7c5441acef138b5038435bf9c71197a3a7b6ca1091b00eb28fc13555701bf3369897c0c32872412945adea9bb5a374725c5e430a5acef019f8ed03a57a87f5396fce7dac6d230a9dc215b17d3b902fb2bd65a89fe98d693cea86fa7b759f939fbca3072a0b0375fef7467fb85ee0c53aa97c584a30da606789801a551056f41d538c47f6dd73a8ad0a0eca765b98a16c32becd8134db0fed4efdb1dd690504e4e219a0d718453f975955ffa9b40c5eccfae8704fe7a5ac47b32d06883991e1cb509eea1bf7fea81dc331ac6682e28c6f2ebeb42b450dbd3ba7058c71f22987822b08237d482fccbc1e0ecd83e312e830bf177c61769179542e0fb5ef6545901174449ddf90c249cbde778cc459f5e6511f8f6cc9e9e355c355a006c053ffba43926f6470d967ddce67dd64602f7d797dc7140353fd05828256d3f633cf0141e64916e48ab20093177c8b5c953d5bf1471120d1cae291c205d7c3fef6fdda5779c65f3787817b313c1189f1c8c962198532402b6aceb8a7324836407ab83f6f989bfc4817dc819fd3f0add87a5f02ee82c2d0e28d0e352430b403066953e54b7ddb091ad6b26a4efe3a29c6463181a231ba1526a27a5c0c3e934afc925824e18ac717a80083309b88045a009141903c8e3380e858a7eca3dd64ad52996049424f8470c4dfad854775b4bd637aaf42746b6a42313ea7a9d0f2a1d9c6cec770b12927ea9243729fd241dbfef643840caa83ef060b26a336d627f5621c2414cbd99fb65ca154d665fed0c76544cf6638a25df14b343ce81a878d319121af44f354cd28f11f799f87c7e4794f960e7cf0c9ee6cb3f5a6c91256ae88ee0ce63b15496e9c53ccc0de6de1fa4832bcc507947dfe2f9170c8378f2dc1fe46df62e4bc98b11cf20354dd10e1ece033d1f51d2cb2ccf6de06a2e6cc9a97c0f4525301543c5d50407c50b119d2e746668142f9839708e383a803641ba7388435a43ce5c4215ed4c14031a6ef5b038413035a721e5e8b062061d8dae39724091eaf10e836ad8f1a7b77c5cc4f99adeb2f24ae3101b5750e51f1f9bbbc739572659acd7fb32756850b1a4983e7412a48a0837ada263cab1297397ae91fe7856fe2872fd466d8fa21d92103244b539a59a1c89e07a13b075e6a88e66293a0a6d653d637f8edbacd6614c87c6bb4d7a69bfe1505c12c2313e5a553950b18dcf6f42f3ffb540d013e320993856913de342615b366db226668fd081db6a43330369b4ff310c4c2d80f6d94024930155d959e63a60fdf5d3a5fc52045005a5f9238c0d666a1f65f12fbe2db69b9a27ae416221c898faef29b4d7e210b5fe1731ea9aa445c7f1c50fd5e681b0a2a7e9657b8c276fe6d9efe49539e002c0fea4d22a339c58dbb9ae2b6f9874f383e5979b688d2e1980e12d6b9705ffd0985fbf1804eb1f29878937d7f917e2928a36409baadbe39abcb4e22e4e16cabad94a69025d5744433db9fbcb004c2ba97bcab85a7ebe06f73c9c011f40b7b0a32c9efc828b847ab3a28e749f0bf78224a366ca90954633ace867a6c582510975270263ca7787f62cddd7572564afe77e9c634dd5ab8f5ea72c408fe90f1453e2f37bc3f3bd397423ac731b5c21cc59e5cf31ba304f89ce01e5a496720c95ba1d0ea64b8a28f27c012eb02342a6351e499e48821440b8856e5e291c04e7eafd78232cbf8286d052f02c4a5f76038a14be2e9cdc36e66dc67096314994e2cf0d8e342b9ac5756fea2d8e22a37af6545a154091fcc3a02d60bbbabe84caeadd78ef11f0af311767c24359a624f3409b1dc4ebb9fcdd8c6b4323491fb2a856214272d8dbe0b423fe3637590906f80b8a3addd53830193aae8779fa6f9fd47b725249272a042a9b00a8f7f5b006da00f87f2cfff19897614e76b596c2a9dbeff10691c06f2df3f7bb9fd084e39a1c3de302ae1d5576766ef1803dda803b21d68e237f2d3e51c63ca9a7c1a472ae0f9b2ca6741548210d9947560e141686cbd20874d84bf87bb49db4b73171747043486dd241e3c9f3b5e3e8e3cc5d31725470f08a47aa4fd6418383ac75239f093ff8088435deb46aa2d4e82b896dee70b5f5e40be02871dfefa09b6d078ce26eca9bcc0f22214571741f6b9a5b1b83f659675868ba2ae68b104fad83cacb10afb48918941479499ef0a349306b4e38dfe9db32bbd3c302ebd76830b10b151e1f989ee7d1f51ab2416c305b6e1d1148ed9c21fb9cfbcc7a0a5a5cd6f75333988b0f7cf065d62ecec57cb7b92a39e9232b9de000d9178caf199d727067fe4ede9aa2e3d28390c800fad8dfdb564c956701d833089ddbe88657d3cdb344cde7c64b4b6e0227af49d588d0743390e46da581fec74bcfd30311cabc82140af89c88a592c3543d283f1699010ac1519f99183a029451e3094447846b3dda05b193b466e704687f16aaf82581c0d23ad8b5a388