1, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(0xffffffffffffffff) 06:10:16 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:10:16 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:10:16 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {0x0}], 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) 06:10:16 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(0xffffffffffffffff) 06:10:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c0800"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:10:16 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:10:17 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c0800"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:10:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() [ 483.506705] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 483.508331] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 483.509711] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 483.512089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 483.513325] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 483.514318] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 483.516161] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 484.716787] Bluetooth: hci0: command 0x0406 tx timeout [ 485.548870] Bluetooth: hci7: command 0x0406 tx timeout [ 485.550050] Bluetooth: hci4: command 0x0406 tx timeout [ 485.551117] Bluetooth: hci3: command 0x0406 tx timeout [ 485.552139] Bluetooth: hci2: command 0x0406 tx timeout [ 485.553158] Bluetooth: hci1: command 0x0406 tx timeout [ 485.554212] Bluetooth: hci5: command 0x0406 tx timeout 06:10:28 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {0x0}], 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) 06:10:28 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:10:28 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:10:28 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(0xffffffffffffffff, r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:10:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:10:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c0800"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:10:28 executing program 6: r0 = syz_io_uring_setup(0x3730, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:10:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:10:28 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {0x0}], 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) 06:10:28 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000280)}], 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) 06:10:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:10:28 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:10:28 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {0x0}], 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) 06:10:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c080000"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:10:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:10:28 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {0x0}], 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) [ 495.284908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 495.286443] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 495.288050] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 495.289453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 495.291000] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 495.292406] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 495.293828] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 496.492772] Bluetooth: hci0: command 0x0406 tx timeout [ 497.324840] Bluetooth: hci7: command 0x0406 tx timeout [ 497.326150] Bluetooth: hci5: command 0x0406 tx timeout [ 497.327161] Bluetooth: hci4: command 0x0406 tx timeout [ 497.328148] Bluetooth: hci3: command 0x0406 tx timeout [ 497.329120] Bluetooth: hci2: command 0x0406 tx timeout [ 497.330086] Bluetooth: hci1: command 0x0406 tx timeout 06:10:38 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:10:38 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:10:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c080000"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:10:38 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:10:38 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {0x0}], 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) 06:10:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:10:38 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x269e, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:10:39 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) [ 504.924619] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 504.928633] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 504.931466] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 504.935351] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 504.938671] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 504.941534] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 504.945138] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:10:39 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x269e, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:10:39 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:10:39 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c080000"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:10:39 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000280)}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) 06:10:39 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r3) 06:10:39 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) 06:10:39 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:10:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:10:39 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) 06:10:39 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 505.979424] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 505.980491] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 505.982252] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 505.983986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 505.985354] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 505.986996] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 505.988423] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 507.180862] Bluetooth: hci0: command 0x0406 tx timeout [ 508.011882] Bluetooth: hci7: command 0x0406 tx timeout [ 508.012996] Bluetooth: hci5: command 0x0406 tx timeout [ 508.014005] Bluetooth: hci4: command 0x0406 tx timeout [ 508.015012] Bluetooth: hci3: command 0x0406 tx timeout [ 508.016021] Bluetooth: hci2: command 0x0406 tx timeout [ 508.017017] Bluetooth: hci1: command 0x0406 tx timeout 06:10:50 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:10:50 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:10:50 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x269e, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:10:50 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:10:50 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) 06:10:50 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:10:50 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:10:50 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r3) 06:10:51 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:10:51 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) [ 517.744184] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 517.746091] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 517.749044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 517.750500] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 517.752186] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 517.753554] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 517.755549] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 518.956790] Bluetooth: hci0: command 0x0406 tx timeout [ 519.788798] Bluetooth: hci7: command 0x0406 tx timeout [ 519.788863] Bluetooth: hci5: command 0x0406 tx timeout [ 519.789295] Bluetooth: hci4: command 0x0406 tx timeout [ 519.790354] Bluetooth: hci3: command 0x0406 tx timeout [ 519.790760] Bluetooth: hci2: command 0x0406 tx timeout [ 519.790779] Bluetooth: hci1: command 0x0406 tx timeout 06:11:04 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:04 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:11:04 executing program 3: r0 = syz_io_uring_setup(0x3730, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:04 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) 06:11:04 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:04 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r3) 06:11:04 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:11:04 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) [ 530.096811] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 530.097406] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 530.099450] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 530.100859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 530.101458] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 530.105948] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 530.106538] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:11:04 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r3) 06:11:04 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:04 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) 06:11:04 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 06:11:04 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:11:04 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r3) 06:11:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:04 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) [ 530.950798] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 530.951540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 530.953516] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 530.955090] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 530.955731] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 530.958311] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 530.959893] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 532.139850] Bluetooth: hci0: command 0x0406 tx timeout [ 532.971861] Bluetooth: hci3: command 0x0406 tx timeout [ 532.972791] Bluetooth: hci2: command 0x0406 tx timeout [ 532.972960] Bluetooth: hci1: command 0x0406 tx timeout [ 532.973369] Bluetooth: hci7: command 0x0406 tx timeout [ 532.974358] Bluetooth: hci5: command 0x0406 tx timeout [ 532.974783] Bluetooth: hci4: command 0x0406 tx timeout 06:11:15 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:15 executing program 3: r0 = syz_io_uring_setup(0x3730, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:15 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r3) 06:11:15 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:15 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:15 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:11:15 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:15 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 541.184464] Bluetooth: hci1: unexpected cc 0x2029 length: 16 > 1 [ 541.185651] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 541.188605] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 541.190508] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:11:15 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) close(r3) 06:11:15 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:15 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:11:15 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:11:15 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:15 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:15 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:15 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() [ 541.192446] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 542.062685] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 542.065656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 542.067451] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 542.068804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 542.070090] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 542.071262] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 542.072546] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 543.277785] Bluetooth: hci0: command 0x0406 tx timeout [ 544.107847] Bluetooth: hci7: command 0x0406 tx timeout [ 544.108798] Bluetooth: hci5: command 0x0406 tx timeout [ 544.108945] Bluetooth: hci4: command 0x0406 tx timeout [ 544.109730] Bluetooth: hci3: command 0x0406 tx timeout [ 544.110689] Bluetooth: hci2: command 0x0406 tx timeout [ 544.111431] Bluetooth: hci1: command 0x0406 tx timeout 06:11:26 executing program 3: r0 = syz_io_uring_setup(0x3730, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:26 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:26 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:11:26 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:11:26 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:26 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) close(r3) 06:11:26 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:11:27 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:11:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:27 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:11:27 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r3) 06:11:27 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:11:27 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:27 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:11:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() [ 553.635695] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 553.637118] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 553.639213] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 553.639939] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 553.640583] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 553.641590] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 553.642541] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 554.859842] Bluetooth: hci0: command 0x0406 tx timeout [ 555.692814] Bluetooth: hci7: command 0x0406 tx timeout [ 555.692889] Bluetooth: hci5: command 0x0406 tx timeout [ 555.693711] Bluetooth: hci4: command 0x0406 tx timeout [ 555.694946] Bluetooth: hci3: command 0x0406 tx timeout [ 555.695719] Bluetooth: hci2: command 0x0406 tx timeout [ 555.695803] Bluetooth: hci1: command 0x0406 tx timeout 06:11:39 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:11:39 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:11:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:39 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:39 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:39 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:39 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) close(r3) 06:11:39 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) [ 565.681971] Bluetooth: hci1: unexpected cc 0x2029 length: 16 > 1 [ 565.683093] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 565.687952] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 565.689177] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 565.690830] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 565.722957] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 565.724300] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 565.726955] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 565.727528] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 565.729579] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 565.730198] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 565.739336] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:11:39 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:39 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:11:40 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:40 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) close(r3) 06:11:40 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x0) 06:11:40 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:11:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:40 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x0) 06:11:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:40 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x0, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() [ 566.708663] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 566.710119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 566.711415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 566.712860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 566.714112] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 566.715417] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 566.716634] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 567.979839] Bluetooth: hci0: command 0x0406 tx timeout [ 568.748925] Bluetooth: hci7: command 0x0406 tx timeout [ 568.749982] Bluetooth: hci5: command 0x0406 tx timeout [ 568.750947] Bluetooth: hci4: command 0x0406 tx timeout [ 568.751932] Bluetooth: hci3: command 0x0406 tx timeout [ 568.752815] Bluetooth: hci2: command 0x0406 tx timeout [ 568.752910] Bluetooth: hci1: command 0x0406 tx timeout 06:11:51 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:51 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) close(r3) 06:11:51 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:51 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x0) 06:11:51 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:11:51 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:11:51 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x0, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:11:51 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x0) [ 577.745593] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 577.746359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 577.748941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 577.749543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 577.755957] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 577.756555] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 577.757327] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:11:51 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:52 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:11:52 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 06:11:52 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:11:52 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:11:52 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) close(r3) 06:11:52 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 578.722345] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 578.724409] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 578.726289] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 578.728306] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 578.730278] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 578.732253] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 578.734276] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 579.958641] Bluetooth: hci0: command 0x0406 tx timeout [ 580.779860] Bluetooth: hci7: command 0x0406 tx timeout [ 580.780876] Bluetooth: hci5: command 0x0406 tx timeout [ 580.781841] Bluetooth: hci4: command 0x0406 tx timeout [ 580.782819] Bluetooth: hci3: command 0x0406 tx timeout [ 580.783783] Bluetooth: hci2: command 0x0406 tx timeout [ 580.787025] Bluetooth: hci1: command 0x0406 tx timeout 06:12:04 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:12:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x0, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:12:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:04 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:12:04 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 06:12:04 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:04 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:12:04 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:12:04 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) 06:12:05 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:12:05 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) close(r3) 06:12:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0x0, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:12:05 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:05 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) 06:12:05 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:12:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0x0, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() [ 591.544693] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 591.546979] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 591.548300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 591.550241] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 591.551296] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 591.552390] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 591.553377] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 592.747840] Bluetooth: hci0: command 0x0406 tx timeout [ 593.579874] Bluetooth: hci4: command 0x0406 tx timeout [ 593.580983] Bluetooth: hci3: command 0x0406 tx timeout [ 593.582265] Bluetooth: hci2: command 0x0406 tx timeout [ 593.583287] Bluetooth: hci1: command 0x0406 tx timeout [ 593.584259] Bluetooth: hci7: command 0x0406 tx timeout [ 593.584817] Bluetooth: hci5: command 0x0406 tx timeout 06:12:19 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:12:19 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:19 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:12:19 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0x0, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:12:19 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:19 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:12:19 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:12:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) 06:12:19 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:12:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}}, 0x0) 06:12:19 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:12:19 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x0, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:12:19 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}}, 0x0) [ 605.981476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 605.982543] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 605.984487] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 605.986203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 605.987818] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 605.988683] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 605.991374] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 607.211862] Bluetooth: hci0: command 0x0406 tx timeout [ 608.043839] Bluetooth: hci4: command 0x0406 tx timeout [ 608.044781] Bluetooth: hci3: command 0x0406 tx timeout [ 608.044920] Bluetooth: hci2: command 0x0406 tx timeout [ 608.045306] Bluetooth: hci1: command 0x0406 tx timeout [ 608.046277] Bluetooth: hci7: command 0x0406 tx timeout [ 608.046794] Bluetooth: hci5: command 0x0406 tx timeout 06:12:30 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:12:30 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:12:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x0, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:12:30 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}}, 0x0) 06:12:30 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:12:30 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:12:30 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:12:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x0, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:12:30 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 617.354126] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 617.355568] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 617.358819] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 617.360185] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 617.363321] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 617.364683] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 617.367875] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 618.539817] Bluetooth: hci0: command 0x0406 tx timeout [ 619.372807] Bluetooth: hci7: command 0x0406 tx timeout [ 619.372858] Bluetooth: hci5: command 0x0406 tx timeout [ 619.373679] Bluetooth: hci4: command 0x0406 tx timeout [ 619.374616] Bluetooth: hci3: command 0x0406 tx timeout [ 619.375404] Bluetooth: hci2: command 0x0406 tx timeout [ 619.376379] Bluetooth: hci1: command 0x0406 tx timeout 06:12:43 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:12:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:12:43 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:12:43 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:12:43 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:43 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:12:43 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:12:43 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB], 0x14}}, 0x0) 06:12:43 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:43 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:12:43 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:43 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB], 0x14}}, 0x0) 06:12:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:12:44 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:44 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r0, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESDEC], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:12:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() [ 630.421878] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 630.422616] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 630.423365] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 630.424089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 630.424879] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 630.425540] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 630.426687] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 631.659830] Bluetooth: hci0: command 0x0406 tx timeout [ 632.427874] Bluetooth: hci5: command 0x0406 tx timeout [ 632.428938] Bluetooth: hci4: command 0x0406 tx timeout [ 632.429939] Bluetooth: hci3: command 0x0406 tx timeout [ 632.430810] Bluetooth: hci2: command 0x0406 tx timeout [ 632.430932] Bluetooth: hci1: command 0x0406 tx timeout [ 632.491884] Bluetooth: hci7: command 0x0406 tx timeout 06:12:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:12:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB], 0x14}}, 0x0) 06:12:58 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:12:58 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:58 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r0, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESDEC], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:12:58 executing program 0: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:12:58 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:12:58 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:12:58 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:12:58 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r0, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESDEC], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:12:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112"], 0x14}}, 0x0) 06:12:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:12:58 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:12:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112"], 0x14}}, 0x0) 06:12:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:12:58 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:12:58 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 644.833812] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 644.836036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 644.837188] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 644.838270] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 644.844068] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 644.845462] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 644.849577] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 646.059906] Bluetooth: hci0: command 0x0406 tx timeout [ 646.891880] Bluetooth: hci7: command 0x0406 tx timeout [ 646.892956] Bluetooth: hci5: command 0x0406 tx timeout [ 646.893966] Bluetooth: hci4: command 0x0406 tx timeout [ 646.894797] Bluetooth: hci3: command 0x0406 tx timeout [ 646.894962] Bluetooth: hci2: command 0x0406 tx timeout [ 646.895396] Bluetooth: hci1: command 0x0406 tx timeout 06:13:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:13:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:13:09 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112"], 0x14}}, 0x0) 06:13:09 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:09 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:13:09 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:13:09 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) [ 655.503709] Bluetooth: hci1: unexpected cc 0x2029 length: 16 > 1 [ 655.512842] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 655.514240] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 655.515544] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:13:09 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:13:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915"], 0x14}}, 0x0) 06:13:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:13:09 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:13:10 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:13:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915"], 0x14}}, 0x0) 06:13:10 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:13:10 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 655.516971] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 656.367871] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 656.370959] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 656.372198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 656.373347] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 656.374574] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 656.377880] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 656.379092] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 657.579875] Bluetooth: hci0: command 0x0406 tx timeout [ 658.411885] Bluetooth: hci7: command 0x0406 tx timeout [ 658.412996] Bluetooth: hci5: command 0x0406 tx timeout [ 658.413799] Bluetooth: hci4: command 0x0406 tx timeout [ 658.414049] Bluetooth: hci3: command 0x0406 tx timeout [ 658.414864] Bluetooth: hci2: command 0x0406 tx timeout [ 658.414904] Bluetooth: hci1: command 0x0406 tx timeout 06:13:23 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:13:23 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915"], 0x14}}, 0x0) 06:13:23 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:23 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:13:23 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:13:23 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:13:23 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:23 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:13:23 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:13:23 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed"], 0x14}}, 0x0) 06:13:23 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:13:23 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:13:23 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:13:23 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:13:23 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:13:23 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 669.930653] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 669.931357] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 669.932102] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 669.932687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 669.933976] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 669.934577] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 669.935327] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 671.148890] Bluetooth: hci0: command 0x0406 tx timeout [ 671.980156] Bluetooth: hci7: command 0x0406 tx timeout [ 671.980791] Bluetooth: hci5: command 0x0406 tx timeout [ 671.981104] Bluetooth: hci4: command 0x0406 tx timeout [ 671.981499] Bluetooth: hci3: command 0x0406 tx timeout [ 671.982718] Bluetooth: hci2: command 0x0406 tx timeout [ 671.982831] Bluetooth: hci1: command 0x0406 tx timeout 06:13:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed"], 0x14}}, 0x0) 06:13:33 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:33 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:13:33 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:13:33 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:33 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed"], 0x14}}, 0x0) 06:13:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:13:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:13:33 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed"], 0x14}}, 0x0) 06:13:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:13:33 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:13:33 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:13:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:13:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:13:34 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:13:34 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:13:34 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 680.201539] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 680.204467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 680.206039] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 680.208332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 680.212045] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 680.224290] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 680.225588] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 681.387856] Bluetooth: hci0: command 0x0406 tx timeout [ 682.220801] Bluetooth: hci4: command 0x0406 tx timeout [ 682.220873] Bluetooth: hci3: command 0x0406 tx timeout [ 682.221673] Bluetooth: hci2: command 0x0406 tx timeout [ 682.222828] Bluetooth: hci1: command 0x0406 tx timeout [ 682.284814] Bluetooth: hci7: command 0x0406 tx timeout [ 682.285975] Bluetooth: hci5: command 0x0406 tx timeout 06:13:47 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:13:47 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:13:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:13:47 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:47 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:13:47 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:47 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:13:47 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x0, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:13:47 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:13:47 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:13:47 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:13:48 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:13:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:13:48 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x0, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:13:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:13:48 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 694.399244] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 694.400592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 694.403342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 694.405352] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 694.408413] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 694.410422] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 694.422430] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 695.595867] Bluetooth: hci0: command 0x0406 tx timeout [ 696.427890] Bluetooth: hci7: command 0x0406 tx timeout [ 696.429006] Bluetooth: hci5: command 0x0406 tx timeout [ 696.430056] Bluetooth: hci4: command 0x0406 tx timeout [ 696.430795] Bluetooth: hci3: command 0x0406 tx timeout [ 696.431086] Bluetooth: hci2: command 0x0406 tx timeout [ 696.431916] Bluetooth: hci1: command 0x0406 tx timeout 06:14:09 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:14:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:09 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x0, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:14:09 executing program 2: syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:09 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:14:09 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:14:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x0, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:14:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:09 executing program 2: syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:14:09 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x0, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:14:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() [ 716.087290] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 716.088079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 716.088691] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 716.089403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 716.090033] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 716.090666] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 716.091792] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 717.292779] Bluetooth: hci0: command 0x0406 tx timeout [ 718.124808] Bluetooth: hci7: command 0x0406 tx timeout [ 718.124879] Bluetooth: hci5: command 0x0406 tx timeout [ 718.125692] Bluetooth: hci4: command 0x0406 tx timeout [ 718.126767] Bluetooth: hci3: command 0x0406 tx timeout [ 718.127491] Bluetooth: hci2: command 0x0406 tx timeout [ 718.128401] Bluetooth: hci1: command 0x0406 tx timeout 06:14:21 executing program 0: syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:21 executing program 2: syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:21 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:14:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:21 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:14:21 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:14:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:21 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) [ 727.084880] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 727.086364] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:14:21 executing program 0: syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 727.089756] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 727.215126] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 727.217902] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:14:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:21 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:21 executing program 2: syz_emit_vhci(0x0, 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:21 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 727.223917] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 727.459954] Bluetooth: hci1: unexpected cc 0x2029 length: 16 > 1 [ 727.461039] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 727.462990] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 727.463752] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:14:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:21 executing program 2: syz_emit_vhci(0x0, 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:21 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 727.468858] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 727.922861] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 727.924170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 727.925026] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 727.925619] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 727.926495] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 727.927198] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 727.928043] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 729.195844] Bluetooth: hci0: command 0x0406 tx timeout [ 729.963826] Bluetooth: hci7: command 0x0406 tx timeout [ 729.964897] Bluetooth: hci5: command 0x0406 tx timeout [ 729.965904] Bluetooth: hci4: command 0x0406 tx timeout [ 729.966915] Bluetooth: hci3: command 0x0406 tx timeout [ 729.967916] Bluetooth: hci2: command 0x0406 tx timeout [ 729.968761] Bluetooth: hci1: command 0x0406 tx timeout 06:14:31 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:31 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:14:31 executing program 6: syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(0xffffffffffffffff, r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:14:31 executing program 2: syz_emit_vhci(0x0, 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:31 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:14:31 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:31 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:14:31 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:14:31 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:14:31 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:14:31 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:31 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:14:32 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:32 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) [ 738.303525] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 738.304401] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 738.305292] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 738.306558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 738.307570] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 738.309197] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 738.310230] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 739.499814] Bluetooth: hci0: command 0x0406 tx timeout [ 740.332819] Bluetooth: hci7: command 0x0406 tx timeout [ 740.334007] Bluetooth: hci5: command 0x0406 tx timeout [ 740.335126] Bluetooth: hci4: command 0x0406 tx timeout [ 740.336207] Bluetooth: hci3: command 0x0406 tx timeout [ 740.337272] Bluetooth: hci2: command 0x0406 tx timeout [ 740.338355] Bluetooth: hci1: command 0x0406 tx timeout 06:14:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:44 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:14:44 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:14:44 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:14:44 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:44 executing program 0: syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:44 executing program 6: syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(0xffffffffffffffff, r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:14:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() [ 750.357994] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 750.359644] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 750.363035] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 750.387856] cgroup: fork rejected by pids controller in /syz0 06:14:44 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:14:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:44 executing program 0: syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:44 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:44 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 750.663079] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 750.664431] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 750.667890] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 751.187783] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 751.189154] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 751.189934] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 751.190558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 751.191975] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 751.192592] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 751.193617] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 752.363876] Bluetooth: hci0: command 0x0406 tx timeout [ 753.195899] Bluetooth: hci7: command 0x0406 tx timeout [ 753.196518] Bluetooth: hci5: command 0x0406 tx timeout [ 753.198767] Bluetooth: hci4: command 0x0406 tx timeout [ 753.199325] Bluetooth: hci3: command 0x0406 tx timeout [ 753.199893] Bluetooth: hci2: command 0x0406 tx timeout [ 753.200437] Bluetooth: hci1: command 0x0406 tx timeout 06:14:54 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:54 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:54 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:14:54 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:14:54 executing program 0: syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:54 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:14:54 executing program 6: syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(0xffffffffffffffff, r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:14:54 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) [ 760.630940] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 760.640961] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:14:54 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYRES16=r2, @ANYBLOB="b353004e3112c7c915ed21"], 0x14}}, 0x0) 06:14:54 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:54 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:54 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:55 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 760.645186] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 760.915959] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 760.918590] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:14:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:14:55 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:14:55 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 760.932156] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 761.429222] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 761.430544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 761.431690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 761.432588] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 761.433496] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 761.434377] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 761.435288] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 762.668677] Bluetooth: hci0: command 0x0406 tx timeout [ 763.437569] Bluetooth: hci7: command 0x0406 tx timeout [ 763.438458] Bluetooth: hci5: command 0x0406 tx timeout [ 763.439287] Bluetooth: hci4: command 0x0406 tx timeout [ 763.440090] Bluetooth: hci3: command 0x0406 tx timeout [ 763.440899] Bluetooth: hci2: command 0x0406 tx timeout [ 763.441690] Bluetooth: hci1: command 0x0406 tx timeout 06:15:05 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:15:05 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:15:05 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:05 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:05 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:15:05 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:15:05 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 771.538417] Bluetooth: hci4: ISO packet for unknown connection handle 1106 [ 771.540345] Bluetooth: hci4: ISO packet for unknown connection handle 1106 [ 771.545931] Bluetooth: hci4: SCO packet for unknown connection handle 205 [ 771.613342] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 771.615878] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:15:05 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:05 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:06 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:15:06 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 771.628816] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 772.025207] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 772.040848] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:15:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:06 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 772.042135] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 772.212484] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 772.219859] Bluetooth: hci4: ISO packet for unknown connection handle 1106 [ 772.221422] Bluetooth: hci4: ISO packet for unknown connection handle 1106 [ 772.228045] Bluetooth: hci4: SCO packet for unknown connection handle 205 [ 772.420994] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 772.424949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 772.426902] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 772.428298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 772.430598] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 772.432034] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 772.433221] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 773.676787] Bluetooth: hci0: command 0x0406 tx timeout [ 774.443917] Bluetooth: hci3: command 0x0406 tx timeout [ 774.444841] Bluetooth: hci2: command 0x0406 tx timeout [ 774.444984] Bluetooth: hci1: command 0x0406 tx timeout [ 774.445712] Bluetooth: hci7: command 0x0406 tx timeout [ 774.445801] Bluetooth: hci5: command 0x0406 tx timeout [ 774.446641] Bluetooth: hci4: command 0x0406 tx timeout 06:15:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:20 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:15:20 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e06002920"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:15:20 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:15:20 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:20 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:20 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:20 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 786.120784] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 786.121481] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:15:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:20 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:20 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:15:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:20 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:20 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e06002920"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 786.128848] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 786.520908] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 786.522181] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:15:20 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() [ 786.526377] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 786.886171] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 786.888435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 786.892093] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 786.893510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 786.894676] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 786.899017] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 786.900667] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 788.076793] Bluetooth: hci0: command 0x0406 tx timeout [ 788.908859] Bluetooth: hci7: command 0x0406 tx timeout [ 788.910031] Bluetooth: hci5: command 0x0406 tx timeout [ 788.910780] Bluetooth: hci4: command 0x0406 tx timeout [ 788.911121] Bluetooth: hci3: command 0x0406 tx timeout [ 788.911947] Bluetooth: hci2: command 0x0406 tx timeout [ 788.912966] Bluetooth: hci1: command 0x0406 tx timeout 06:15:33 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:33 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:15:33 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:15:33 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e06002920"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:15:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:33 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:15:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:33 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e06002920"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 799.390059] Bluetooth: hci4: unexpected cc 0x2029 length: 16 > 1 [ 799.391293] Bluetooth: hci4: unexpected event for opcode 0x2029 [ 799.394835] Bluetooth: hci4: ISO packet for unknown connection handle 1106 [ 799.396215] Bluetooth: hci4: ISO packet for unknown connection handle 1106 [ 799.399430] Bluetooth: hci4: SCO packet for unknown connection handle 205 [ 799.430114] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 799.432885] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:15:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:33 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:33 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:33 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 799.437901] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 800.252294] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 800.254861] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 800.257040] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 800.258288] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 800.259509] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 800.260846] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 800.262044] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 801.452779] Bluetooth: hci0: command 0x0406 tx timeout [ 802.283851] Bluetooth: hci7: command 0x0406 tx timeout [ 802.285119] Bluetooth: hci5: command 0x0406 tx timeout [ 802.286261] Bluetooth: hci4: command 0x0406 tx timeout [ 802.287371] Bluetooth: hci3: command 0x0406 tx timeout [ 802.288591] Bluetooth: hci2: command 0x0406 tx timeout [ 802.288757] Bluetooth: hci1: command 0x0406 tx timeout 06:15:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:44 executing program 4: syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(0xffffffffffffffff, r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:15:44 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(0x0, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:15:44 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:44 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:44 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:15:44 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:44 executing program 3: syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(0xffffffffffffffff, r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:15:44 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:15:45 executing program 6: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:15:45 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:45 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:45 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(0x0, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:15:45 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 811.587616] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 811.589695] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 811.591704] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 811.595188] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 811.596641] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 811.599047] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 811.600505] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 812.779915] Bluetooth: hci0: command 0x0406 tx timeout [ 813.613921] Bluetooth: hci7: command 0x0406 tx timeout [ 813.615029] Bluetooth: hci5: command 0x0406 tx timeout [ 813.616069] Bluetooth: hci4: command 0x0406 tx timeout [ 813.617095] Bluetooth: hci3: command 0x0406 tx timeout [ 813.617836] Bluetooth: hci2: command 0x0406 tx timeout [ 813.618122] Bluetooth: hci1: command 0x0406 tx timeout 06:15:56 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:56 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:56 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:56 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(0x0, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:15:56 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:56 executing program 3: syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(0xffffffffffffffff, r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:15:56 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:56 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:56 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:56 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:56 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x6, 0x3f, 0x20, 0x0, 0x2, 0x81840, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x44100, 0x9, 0x0, 0x7, 0x5, 0xe7, 0x88a, 0x0, 0x7fff, 0x0, 0xfffe}, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:15:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:56 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:15:57 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:15:57 executing program 6: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(0x0, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 822.929559] Bluetooth: hci3: unexpected cc 0x2029 length: 16 > 1 [ 822.930575] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 822.933052] Bluetooth: hci3: ISO packet for unknown connection handle 1106 [ 822.934271] Bluetooth: hci3: ISO packet for unknown connection handle 1106 06:15:57 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:15:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:15:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() [ 822.935596] Bluetooth: hci3: SCO packet for unknown connection handle 205 [ 823.317314] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 823.324193] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 823.325625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 823.326274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 823.328182] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 823.329744] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 823.330364] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 824.555914] Bluetooth: hci0: command 0x0406 tx timeout [ 825.389176] Bluetooth: hci7: command 0x0406 tx timeout [ 825.389437] Bluetooth: hci5: command 0x0406 tx timeout [ 825.390115] Bluetooth: hci4: command 0x0406 tx timeout [ 825.391183] Bluetooth: hci3: command 0x0406 tx timeout [ 825.392080] Bluetooth: hci2: command 0x0406 tx timeout [ 825.392118] Bluetooth: hci1: command 0x0406 tx timeout 06:16:10 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:10 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:10 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:16:10 executing program 3: syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(0xffffffffffffffff, r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:16:10 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:10 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) close(r3) 06:16:10 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:10 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:16:10 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:10 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) close(r3) 06:16:10 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:10 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:10 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:11 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:16:11 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:16:11 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:11 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 837.148896] Bluetooth: hci1: unexpected cc 0x2029 length: 16 > 1 [ 837.149445] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 837.153194] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 837.154171] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:16:11 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:11 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 837.163129] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 837.349403] Bluetooth: hci1: unexpected cc 0x2029 length: 16 > 1 [ 837.350533] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 837.357230] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 837.358464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 837.358667] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 837.359810] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 837.361069] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 837.364896] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 837.390427] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 837.398136] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 837.399351] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 837.405138] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:16:11 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:16:11 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:16:11 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) 06:16:11 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 838.422506] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 838.423711] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 838.426265] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 838.427925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 838.429342] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 838.431118] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 838.432529] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 839.595853] Bluetooth: hci0: command 0x0406 tx timeout [ 840.427902] Bluetooth: hci2: command 0x0406 tx timeout [ 840.428767] Bluetooth: hci1: command 0x0406 tx timeout [ 840.492819] Bluetooth: hci7: command 0x0406 tx timeout [ 840.492882] Bluetooth: hci5: command 0x0406 tx timeout [ 840.493537] Bluetooth: hci4: command 0x0406 tx timeout [ 840.494578] Bluetooth: hci3: command 0x0406 tx timeout 06:16:24 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) close(r3) 06:16:24 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) 06:16:24 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:16:24 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:24 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:16:24 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:24 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x0, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:24 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de21bffee3823a791d048afa322746644f7f859001813c3334fc69b6fb2e40f2e354b4ded4853431c4296494d914ee6ad59f0fce8be5f8950"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 850.527927] Bluetooth: hci1: unexpected cc 0x2029 length: 16 > 1 [ 850.528943] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 850.543945] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 850.546330] Bluetooth: hci1: ISO packet for unknown connection handle 1106 06:16:24 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 850.551549] Bluetooth: hci1: SCO packet for unknown connection handle 205 [ 851.441660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 851.445421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 851.448643] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 851.449847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 851.451427] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 851.452813] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 851.454060] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 852.716763] Bluetooth: hci0: command 0x0406 tx timeout [ 853.483824] Bluetooth: hci7: command 0x0406 tx timeout [ 853.484565] Bluetooth: hci5: command 0x0406 tx timeout [ 853.484785] Bluetooth: hci4: command 0x0406 tx timeout [ 853.486158] Bluetooth: hci3: command 0x0406 tx timeout [ 853.486791] Bluetooth: hci2: command 0x0406 tx timeout [ 853.487060] Bluetooth: hci1: command 0x0406 tx timeout 06:16:36 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:36 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:16:36 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) 06:16:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:36 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x0, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:36 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:16:36 executing program 6: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:16:36 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) [ 862.059112] Bluetooth: hci3: unexpected cc 0x2029 length: 16 > 1 [ 862.060320] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 862.073146] Bluetooth: hci3: ISO packet for unknown connection handle 1106 [ 862.076509] Bluetooth: hci3: ISO packet for unknown connection handle 1106 06:16:36 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x0, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:36 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x0, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:36 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:16:36 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) close(r3) [ 862.082570] Bluetooth: hci3: SCO packet for unknown connection handle 205 [ 862.884239] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 862.886631] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 862.888133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 862.889467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 862.890951] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 862.892201] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 862.893655] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 864.107804] Bluetooth: hci0: command 0x0406 tx timeout [ 864.939844] Bluetooth: hci7: command 0x0406 tx timeout [ 864.941044] Bluetooth: hci5: command 0x0406 tx timeout [ 864.942169] Bluetooth: hci4: command 0x0406 tx timeout [ 864.943287] Bluetooth: hci3: command 0x0406 tx timeout [ 864.943771] Bluetooth: hci2: command 0x0406 tx timeout [ 864.944402] Bluetooth: hci1: command 0x0406 tx timeout 06:16:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:46 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x0, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:46 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:16:46 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:16:46 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) close(r3) 06:16:46 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) 06:16:46 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:16:46 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:47 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) 06:16:47 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x0, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:47 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:16:47 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x0, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:47 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:16:47 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:16:47 executing program 3: r0 = syz_io_uring_setup(0x3730, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:16:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:47 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x0, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:47 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:16:59 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x0, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:16:59 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)) 06:16:59 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:16:59 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:16:59 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:59 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:16:59 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x0, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 885.847157] Bluetooth: hci2: unexpected cc 0x2029 length: 16 > 1 [ 885.848212] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 885.867925] Bluetooth: hci2: ISO packet for unknown connection handle 1106 [ 885.870590] Bluetooth: hci2: ISO packet for unknown connection handle 1106 06:17:00 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x0, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:17:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:17:00 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de2", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:17:00 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x0, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:17:00 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x0, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:17:00 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:17:00 executing program 6: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:17:00 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) [ 885.885933] Bluetooth: hci2: SCO packet for unknown connection handle 205 [ 886.604239] Bluetooth: hci3: unexpected cc 0x2029 length: 16 > 1 [ 886.605543] [ 886.606321] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 886.606574] ===================================== [ 886.608158] WARNING: bad unlock balance detected! [ 886.608884] 6.19.0-rc5-next-20260115 #1 Not tainted [ 886.609632] ------------------------------------- [ 886.610363] syz-executor.3/8248 is trying to release lock (rcu_read_lock) at: [ 886.611455] [] __wait_on_freeing_inode+0x105/0x350 [ 886.612472] but there are no more locks to release! [ 886.613230] [ 886.613230] other info that might help us debug this: [ 886.614213] 4 locks held by syz-executor.3/8248: [ 886.614931] #0: ffff88800f70e3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 886.616291] #1: ffff88805a22d9a8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 886.617813] #2: ffff88800f832950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 886.620166] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 886.622255] [ 886.622255] stack backtrace: [ 886.623317] CPU: 0 UID: 0 PID: 8248 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 886.623346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.623359] Call Trace: [ 886.623368] [ 886.623377] dump_stack_lvl+0xca/0x120 [ 886.623425] ? __wait_on_freeing_inode+0x105/0x350 [ 886.623453] print_unlock_imbalance_bug+0x118/0x130 [ 886.623482] ? __wait_on_freeing_inode+0x105/0x350 [ 886.623511] lock_release+0x1ee/0x270 [ 886.623543] __wait_on_freeing_inode+0x10a/0x350 [ 886.623573] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 886.623606] ? __pfx_var_wake_function+0x10/0x10 [ 886.623643] ? lock_is_held_type+0x9e/0x120 [ 886.623668] insert_inode_locked+0x25f/0x890 [ 886.623706] __ext4_new_inode+0x223d/0x4cd0 [ 886.623747] ? __pfx___ext4_new_inode+0x10/0x10 [ 886.623778] ? __pfx___dquot_initialize+0x10/0x10 [ 886.623814] ? __pfx_avc_has_perm+0x10/0x10 [ 886.623850] ext4_symlink+0x623/0xb40 [ 886.623904] ? __pfx_ext4_symlink+0x10/0x10 [ 886.623938] ? security_inode_permission+0x72/0xe0 [ 886.623968] vfs_symlink+0x44b/0x840 [ 886.624003] filename_symlinkat+0x158/0x440 [ 886.624034] ? __pfx_filename_symlinkat+0x10/0x10 [ 886.624062] ? strncpy_from_user+0x21b/0x2f0 [ 886.624100] __x64_sys_symlink+0x82/0x110 [ 886.624127] do_syscall_64+0xbf/0x420 [ 886.624154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.624178] RIP: 0033:0x7fa1d52e7427 [ 886.624195] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.624217] RSP: 002b:00007ffd772e1268 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 886.624238] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1d52e7427 [ 886.624253] RDX: 00007ffd772e1347 RSI: 00007fa1d5342019 RDI: 00007ffd772e1330 [ 886.624267] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd772e1100 [ 886.624281] R10: 00007ffd772e0fb7 R11: 0000000000000202 R12: 0000000000000001 [ 886.624295] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd772e1330 [ 886.624323] [ 886.659079] ------------[ cut here ]------------ [ 886.661078] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.3/8248 [ 886.662829] Modules linked in: [ 886.663409] CPU: 0 UID: 0 PID: 8248 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 886.665012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.666342] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 886.667346] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 886.670208] RSP: 0018:ffff88806700f9a0 EFLAGS: 00010286 [ 886.671118] RAX: 00000000ffffffff RBX: ffff88806b06b700 RCX: ffffffff815660f7 [ 886.672322] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88806b06bafc [ 886.673507] RBP: ffff88806b06b700 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 886.674695] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88806b06b700 [ 886.675971] R13: 0000000000000001 R14: ffffffff85c0db00 R15: ffff88801b348318 [ 886.677159] FS: 0000555556e1a400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 886.678495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 886.679475] CR2: 00007fa1d5367543 CR3: 000000006592b000 CR4: 0000000000350ef0 [ 886.680678] Call Trace: [ 886.681248] [ 886.682620] __wait_on_freeing_inode+0x10f/0x350 [ 886.684086] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 886.686243] ? __pfx_var_wake_function+0x10/0x10 [ 886.688697] ? lock_is_held_type+0x9e/0x120 [ 886.691207] insert_inode_locked+0x25f/0x890 [ 886.694501] __ext4_new_inode+0x223d/0x4cd0 [ 886.699601] ? __pfx___ext4_new_inode+0x10/0x10 [ 886.702217] ? __pfx___dquot_initialize+0x10/0x10 [ 886.703707] ? __pfx_avc_has_perm+0x10/0x10 [ 886.707452] ext4_symlink+0x623/0xb40 [ 886.712242] ? __pfx_ext4_symlink+0x10/0x10 [ 886.714378] ? security_inode_permission+0x72/0xe0 [ 886.717867] vfs_symlink+0x44b/0x840 [ 886.723067] filename_symlinkat+0x158/0x440 [ 886.725476] ? __pfx_filename_symlinkat+0x10/0x10 [ 886.727110] ? strncpy_from_user+0x21b/0x2f0 [ 886.731030] __x64_sys_symlink+0x82/0x110 [ 886.732416] do_syscall_64+0xbf/0x420 [ 886.733981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.734975] RIP: 0033:0x7fa1d52e7427 [ 886.735632] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.738281] RSP: 002b:00007ffd772e1268 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 886.739444] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1d52e7427 [ 886.740546] RDX: 00007ffd772e1347 RSI: 00007fa1d5342019 RDI: 00007ffd772e1330 [ 886.741636] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd772e1100 [ 886.742802] R10: 00007ffd772e0fb7 R11: 0000000000000202 R12: 0000000000000001 [ 886.743920] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd772e1330 [ 886.748946] [ 886.749302] irq event stamp: 203 [ 886.749871] hardirqs last enabled at (203): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 886.751417] hardirqs last disabled at (202): [] _raw_spin_lock_irqsave+0x53/0x60 [ 886.752989] softirqs last enabled at (198): [] kernel_fpu_end+0x59/0x70 [ 886.754375] softirqs last disabled at (196): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 886.755857] ---[ end trace 0000000000000000 ]--- [ 886.761907] Bluetooth: hci3: ISO packet for unknown connection handle 1106 [ 886.775447] Bluetooth: hci3: ISO packet for unknown connection handle 1106 [ 886.780136] Bluetooth: hci3: SCO packet for unknown connection handle 205 [ 889.903186] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 889.905932] Bluetooth: hci2: Injecting HCI hardware error event [ 889.908191] Bluetooth: hci2: hardware error 0x00 [ 890.667906] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 890.669419] Bluetooth: hci3: Injecting HCI hardware error event [ 890.670877] Bluetooth: hci3: hardware error 0x00 [ 891.948295] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 892.715849] Bluetooth: hci3: Opcode 0x0c03 failed: -110 06:17:09 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:17:09 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:17:09 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:17:09 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:17:09 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) 06:17:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:17:09 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600292080"], 0x16) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="9845fa352f9e000000000000ffff000000000000bf032079ebdb970361176727555b12ec3cd6b99ed2f9ad0b8ca866e6437a933d3b623dda1f21825006fa25814ea90757216e7220788283679ab67eea06bfbfd168f0b76067e2d75f8bbfce72fa1fea8c74467fb325ea642be867bd3e79a76b17283b656a1d2995d6e1a51d8a60ef44e0e2b5b46f9d37fef04c2e2ff2f550e969ad146d95d279200000001ecaf5ba9097279de2", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:17:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa0003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x0, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x77}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x4c, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 06:17:09 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:17:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:17:09 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) 06:17:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:17:09 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) 06:17:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x20, 0xff, 0x2, 0x0, 0x0, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x9}, 0x10, 0x0, 0x1ff, 0x5, 0x8, 0x858, 0x7ff, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x91, 0x0, 0x3}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3) fork() 06:17:09 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) close(r4) VM DIAGNOSIS: 06:17:00 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff829750a0 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88806ce088a0 R8 =0000000000000000 R9 =ffffed10016a4046 R10=00000000000fe503 R11=652d7a7973205043 R12=0000000000000823 R13=0000000000000060 R14=fffffbfff113838e R15=dffffc0000000000 RIP=ffffffff829750f5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556e1a400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa1d5367543 CR3=000000006592b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88800f6f7b40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11001edef69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88800f6f7b78 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555591d6c400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555591d75c58 CR3=000000001420b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000