ooth: hci3: SCO packet for unknown connection handle 200 [ 2193.243744] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2193.251712] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 2193.253986] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2193.256413] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2193.263775] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2193.266325] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2193.268531] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 2193.269724] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2193.270658] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2193.271614] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2193.271786] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2193.274863] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2193.276771] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2193.277070] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2193.279694] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2193.282551] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2193.285986] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2193.290494] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 2193.297522] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2193.299676] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:10:11 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:10:11 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001100)={0x9, 0x1ff, 0x100, 0x1, 0x7}, 0x14) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000440)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000000c0)={{r0}, 0x0, 0x4, @unused=[0xb74, 0x10001, 0x4, 0x7], @devid}) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:10:11 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2193.476524] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2193.479745] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2193.482332] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 2193.483479] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2193.487208] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2193.488941] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2193.617590] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2193.621012] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2193.623711] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2193.626741] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2193.632799] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2193.636868] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2193.638362] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2193.639035] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2193.639843] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:10:34 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:10:34 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8}, "8c68183ce718735457abcaea407bd4d3fffbb9d393241e5f07fa9a2add14bc19b534818a23a2fd01523006000000f68fa0740c20d67ebb0fe5e553d376d6edbb1bfe67e62733d6bbee7ac30e8d149eead1eeca3387fd45e9e64345efb9653c0d8f4ae9fd85a5160f6d"}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 22:10:34 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:10:34 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:10:34 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:10:34 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:10:34 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:10:34 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001100)={0x9, 0x1ff, 0x100, 0x1, 0x7}, 0x14) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000440)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000000c0)={{r0}, 0x0, 0x4, @unused=[0xb74, 0x10001, 0x4, 0x7], @devid}) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) [ 2216.349621] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2216.351103] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2216.352582] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2216.354030] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2216.355748] bt_err_ratelimited: 2 callbacks suppressed 22:10:34 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:10:34 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000000)={0x0, 0xea60}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/247, 0xf7}], 0x1) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x800) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04d47b380000b00061eb00190000000000000400"/47], 0x22) r3 = timerfd_create(0x6, 0x80000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0xf, 0x0, &(0x7f0000000440)) shutdown(r4, 0x1) close_range(r3, 0xffffffffffffffff, 0x2) [ 2216.355796] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2216.465185] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 2216.467782] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2216.469144] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2216.470412] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2216.471840] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 2216.541428] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2216.542821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2216.543580] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2216.544223] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2216.545085] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2216.545777] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2216.546613] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2216.546740] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2216.548029] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2216.548895] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2216.549006] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2216.549724] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2216.551058] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2216.551772] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2216.552536] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2216.553175] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2216.553883] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2216.554715] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2216.555403] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2216.556071] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2216.556938] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2216.557051] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2216.558738] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2216.560021] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:10:34 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:10:34 executing program 6: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001100)={0x9, 0x1ff, 0x100, 0x1, 0x7}, 0x14) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000440)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000000c0)={{r0}, 0x0, 0x4, @unused=[0xb74, 0x10001, 0x4, 0x7], @devid}) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000024c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) clock_gettime(0x0, &(0x7f0000006380)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000006280)=[{{&(0x7f0000003580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003600)=""/82, 0x52}], 0x1, &(0x7f0000003780)=""/34, 0x22}}, {{0x0, 0x0, &(0x7f0000005d00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1c}, {0x0}, {0x0}], 0x9}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40010022, &(0x7f00000063c0)={0x0, r5+10000000}) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:10:34 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2216.562020] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2216.702816] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2216.707789] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2216.714862] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:10:34 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:10:34 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:10:34 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001100)={0x9, 0x1ff, 0x100, 0x1, 0x7}, 0x14) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000440)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000000c0)={{r0}, 0x0, 0x4, @unused=[0xb74, 0x10001, 0x4, 0x7], @devid}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) [ 2216.717098] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2216.865374] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2216.865389] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2216.865505] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2216.866116] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2216.867341] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2216.867846] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2216.868916] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2216.870943] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2216.871141] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2216.894831] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2216.897552] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2216.899719] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2216.901006] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:10:59 executing program 4: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1}}}, 0x4) 22:10:59 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:10:59 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:10:59 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:10:59 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:10:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:10:59 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:10:59 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001100)={0x9, 0x1ff, 0x100, 0x1, 0x7}, 0x14) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) [ 2241.740558] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2241.742076] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2241.743566] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2241.745003] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2241.746740] bt_err_ratelimited: 3 callbacks suppressed [ 2241.746788] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2241.769124] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2241.771670] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2241.775346] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2241.776627] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2241.778172] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2241.780409] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2241.796749] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2241.807892] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2241.813437] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2241.814763] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:10:59 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2241.865652] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2241.870592] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2241.874054] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2241.877523] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2241.879344] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2241.882280] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2241.883454] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2241.891982] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2241.899063] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2241.900622] Bluetooth: hci3: ACL packet for unknown connection handle 0 22:10:59 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:10:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:10:59 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2241.907018] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2241.996622] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2242.000595] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2242.017694] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2242.019307] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:10:59 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04221f020000000000000000004513f4000006aaaaaaaaaa01000000b0f561000000a9b2"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x79}, "79fe76a1b8d5b725fc79bbfc94dfeb62dc82da708e6df79cceb83d1e572a9d59acd9e86613112fe854a87cc95feca7fa14de38ac9a654de8b7a5790d207062454463fbf3b486e9ead48ebb8e73463d3de87dd16d5aa737cd6cb361c1723c4d4e2b900730c04858d9cd089ff83d2568e7f6c1c529860c9642e4"}, 0x7d) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x12}, {0x7, 0x0, 0x8001, 0x4, [0xff, 0x101, 0x79f8, 0x7fff, 0x4be]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000001280)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f00000012c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x40}, @l2cap_cid_signaling={{0x3c}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0xab0, 0xa62a}}, @l2cap_info_req={{0xa, 0x20, 0x2}, {0x401}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x1}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x3, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x3f}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x3f}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x3, 0x4, 0x5, 0x3}}]}}, 0x45) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb}, "31947fe03b0d22fc2261f3"}, 0xf) 22:10:59 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:10:59 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001100)={0x9, 0x1ff, 0x100, 0x1, 0x7}, 0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) [ 2242.029494] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2242.107070] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2242.114839] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2242.117837] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2242.119634] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2242.124105] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2242.131486] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2242.135793] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2242.139711] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2242.140861] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2242.141527] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2242.145897] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2242.156184] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2242.161958] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2242.175520] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2242.179365] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2242.242113] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2242.252427] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2242.261011] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2242.274791] Bluetooth: hci3: ACL packet for unknown connection handle 0 22:11:25 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:11:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x8, 0x8, 0xfffff37e, 0xce16, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0xb1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010102, {[@cipso={0x86, 0x6, 0x1}, @lsrr={0x83, 0xf, 0x8a, [@loopback, @broadcast, @local]}, @timestamp_prespec={0x44, 0x34, 0xc, 0x3, 0x8, [{@multicast2, 0x3d}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xffff8001}, {@rand_addr=0x64010100, 0x1}, {@multicast2}, {@local, 0x5}, {@broadcast, 0x205}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000340)={0x6ec, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x344, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!-\'.@@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '\\[%(-)#!\xcf^]S+$-:*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x34}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':.'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x82}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*-\xae\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#x\x9d./\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1914867}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{+\\/\x1a\xe1#\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xed, 0x5, "660907e4c5a931b4bf7fa96c9aa1e49b2a502d402cc58d4063f192269ac68f3eeb446c9c9f8da2b3a44f513c30d5a2d7a1aecaacde070234d3b3a6cbc5ff11f80da76d80ba729beb1551092c8cdb48c91a08372140ff1e76d5ca2e56ed6704254ab859650d35ff0d7a0fb1aefeeb23ffedc9312aaa9c850658572b927676f4f662e5953704be4730a4d8a1bb7be176b2b431a61220240ce9222f95e32f421d91a28d4631d09fadad552fe14f6412744a664a0da601750c9dde3dd2b7d64be793104705ef7539791824d8d99446df01bbff34513d512e86d52b79f1362bdcd0c61e9b460eaf421938cc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8d4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeee}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xf2, 0x5, "81fbdec76b92ece30711c8502a5f6ab9fd2cc26042f6c4d62669fafb71610035a92c3647c9b915f5ca8524bd79b44d0c5a5a83364ebe65ccf84821cab1b56885866e0e03816b282eead4f307bcf6886a3c688ef2c7461eca975214657ca77bf968a2a2d6065d5b658dfa63660fdee61e2669e167d5073d61f8e8529f46dcdde24a6d9b0f1f0881e5793750a951d2686ccf3d223282dc4c1f89da80a180d426e46e09a28cbff144b1772992335943b8b962e098cc3945a6885aede8fe7a59a5d57a7e867a28c4fdf0086ec02fe521230b43d1869f2fb80c791610d339c6ea4c6119e4d05a83e2fa091080170e0823"}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "1f878c0da9e1ffad9f50624d87f7fdf22da771161d381a70c08b4c7703d3040a5447dbb6fe0f49e991297de08ec75b184da9fae920dec36009a6610eb0b8dee446b5dc14e393b64f6816395364b28616adc5b25c2edede59cf70fd98295e0fc97e62e1dbe2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "63af6c249846351c55"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6a0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\}-\xe7\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x6ec}, 0x1, 0x0, 0x0, 0x44044}, 0x4000) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "4513f4"}, {@fixed, 0x0, 0x0, 0xe3, "b00061"}]}}}, 0x22) setns(r0, 0x10000000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8005edfe4bd624d1dea40c7bf30ea4f494c292253acff97e04d1278132b48cc224817fc33a3b428891dd9c7eeef7a9b29268b426cfdaae53a15aa5dafc0947280cb1ad6c0b9238f837011f6bcdd30a1ba32532ce9508f2a4ff9bd3bb93e82"], 0x62) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x102) 22:11:25 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:11:25 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:11:25 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:11:25 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:11:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:11:25 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001100)={0x9, 0x1ff, 0x100, 0x1, 0x7}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) [ 2267.468609] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2267.469899] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2267.471260] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2267.472975] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2267.474587] bt_err_ratelimited: 2 callbacks suppressed [ 2267.474630] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2267.477102] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2267.479535] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2267.480794] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2267.482051] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2267.520802] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2267.525946] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2267.537590] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2267.540587] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2267.547489] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2267.549899] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2267.551064] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2267.561200] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2267.568393] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2267.569681] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 2267.571315] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2267.574630] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2267.577352] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2267.579527] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2267.580934] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2267.591676] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:11:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:11:25 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:11:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2267.592040] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2267.620630] blktrace: Concurrent blktraces are not allowed on sr0 22:11:25 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:11:25 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="a95106e9df08bc418468f732d030689cca0e83cf1e034cd74eae0afd035eed365be3a6452452458f983db38524536fdad597d43eab4aab2f316f58f4130100ee1c345a7d22dfb6ada0507ddfe19b03d63dc8185b8967f04892f35010cd5175a87e46d5e7e1f27c248ea58256d2615298127ac3372145f93694fecee27228c7f96819e963d00168ddc82ab0094402b7336826028864f22fe13ffe97f709f6f86597485009ff1bc5f8ecda0ff5152d3b73dfa42a7c5a100f8ddfdd2587f47800a4985c00032b9669fe98beba8cf409ef854677ba5b94d455eeab4127949d6e25db80edd59e90d6559b7c685c2d3d7787a3c8fe50d5156ecb59"], 0x6) 22:11:25 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:11:25 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:11:25 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) [ 2267.803466] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2267.810442] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2267.815352] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2267.816916] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2267.818539] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2267.820455] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2267.821987] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2267.823448] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2267.825097] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2267.829140] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2267.832288] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2267.833906] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2267.838085] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2267.840680] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2267.842035] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2267.846493] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2267.854757] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2267.856020] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2267.857336] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:11:25 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:11:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'ipvlan0\x00', 0x3}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "4513f4"}, {@fixed}]}}}, 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x3, 0x2}, {0x20}}}}, 0xf) [ 2267.870209] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2267.952291] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2267.957590] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2267.959860] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2267.961604] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2267.997282] blktrace: Concurrent blktraces are not allowed on sr0 22:11:50 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:11:50 executing program 4: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x0, 0x0, "4513f4"}, {@fixed, 0x0, 0x0, 0x0, "b00061", 0x0, 0x7}]}}}, 0x22) 22:11:50 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:11:50 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:11:50 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:11:50 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:11:50 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:11:50 executing program 6: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) [ 2292.848308] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2292.849874] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2292.855007] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2292.861291] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2292.863077] bt_err_ratelimited: 2 callbacks suppressed 22:11:50 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2292.863124] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2292.936293] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2292.937684] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2292.938384] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2292.939000] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2292.939830] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2292.995887] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2292.999154] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2293.001623] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2293.002477] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2293.004803] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2293.022438] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2293.029649] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2293.030933] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2293.031934] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2293.040983] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2293.041701] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2293.043469] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2293.044198] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2293.046020] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:11:50 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2293.046856] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2293.065888] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2293.067495] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2293.072160] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2293.072903] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2293.080085] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:11:50 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:11:50 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:11:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000000)={0x9, 0x2f, 0x8, 0x2, 0x0, 0x7, 0x2, 0x88}) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "4513f4"}, {@fixed, 0x0, 0x0, 0x0, "b00061"}]}}}, 0x22) 22:11:51 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{}, {0x7f, 0xc9, 0x0, 0x1ef}}}, 0x4) [ 2293.080977] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2293.233720] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2293.235555] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2293.237317] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2293.238451] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2293.254369] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2293.340625] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2293.378907] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2293.387132] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2293.388950] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2293.395661] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2293.397515] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2293.398263] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:12:18 executing program 6: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:12:18 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:12:18 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:12:18 executing program 4: r0 = inotify_init() ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04221f020000000000000000004513f4000000aaaaaaaaaa00000038511b220000000e44cb8ab9ce7c8f810ed88f092c8392d61cce3c4c77d1c5f06b64ee24c09cbcfe9e26f7158bc260d7b6003e7cc2aac511a081f7abcff185895389293e2cb1b8fe9a"], 0x22) 22:12:18 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:12:18 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:12:18 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:12:18 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2293.422646] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2320.229184] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2320.233366] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2320.236182] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2320.238308] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2320.241400] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2320.243735] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2320.245951] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2320.249777] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2320.250770] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2320.257350] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:12:18 executing program 4: r0 = memfd_secret(0x80000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0x3, 0x5, {{0xc, 0x4, 0x2, 0x32, 0x30, 0x68, 0x0, 0x81, 0x4, 0x0, @private=0xa010101, @multicast1, {[@end, @lsrr={0x83, 0x1b, 0xc4, [@loopback, @loopback, @private=0xa010102, @local, @local, @multicast2]}]}}}}}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0c221f020001ddfffffffffbb8c6a8ef02247fde00004513f4"], 0x22) 22:12:18 executing program 6: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) [ 2320.272427] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2320.362517] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2320.368513] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2320.370383] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2320.374939] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2320.387289] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2320.389463] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2320.390144] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2320.407517] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2320.408598] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2320.409479] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2320.412864] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2320.413686] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2320.426648] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:12:18 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:12:18 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2320.434997] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2320.466590] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2320.468888] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2320.470392] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2320.471167] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:12:18 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:12:18 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2320.529871] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2320.531027] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2320.533156] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2320.537789] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:12:18 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:12:18 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04221f020000000000000000004513f4000000aaaaaaaaa800000000b00061000000"], 0x22) 22:12:18 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2320.610745] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2320.612008] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2320.614109] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:12:18 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:12:18 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2320.719903] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2320.722185] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2320.724747] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2320.748654] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2320.749994] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2320.754693] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2320.757600] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2320.773748] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2320.775123] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2320.780837] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2320.785128] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2320.794282] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2320.810750] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2320.846707] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2320.849941] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2320.855719] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2320.858084] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2320.860088] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2320.942825] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2320.948442] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2320.950596] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2320.951712] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:12:37 executing program 6: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:12:37 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:12:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) fchdir(0xffffffffffffffff) write$P9_RREMOVE(r2, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "4513f4"}, {@any, 0x0, 0x0, 0x0, "b00061"}]}}}, 0x22) 22:12:37 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:12:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:12:37 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:12:37 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:12:37 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2340.127124] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2340.131800] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2340.132739] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2340.133562] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2340.135886] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2340.136723] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2340.137709] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2340.138495] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2340.140726] bt_err_ratelimited: 2 callbacks suppressed [ 2340.140750] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2340.141670] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2340.143405] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2340.145804] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2340.146692] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2340.157230] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2340.175476] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:12:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:12:38 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2340.222529] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2340.232491] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2340.241537] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2340.242272] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:12:38 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2340.249542] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2340.273276] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2340.275935] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2340.277969] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2340.280118] Bluetooth: hci4: ACL packet for unknown connection handle 0 22:12:38 executing program 6: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) [ 2340.281649] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2340.309692] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:12:38 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2340.344693] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2340.346883] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2340.348442] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2340.350481] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2340.351737] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2340.427454] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2340.429181] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2340.430961] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2340.431854] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2340.433690] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2340.435631] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2340.486923] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2340.489627] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2340.491298] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2340.492442] Bluetooth: hci4: ACL packet for unknown connection handle 0 22:12:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:12:57 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:12:57 executing program 6: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:12:57 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:12:57 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:12:57 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:12:57 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:12:57 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2360.142322] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2360.145805] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2360.148536] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2360.149781] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2360.153516] bt_err_ratelimited: 1 callbacks suppressed [ 2360.153539] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2360.155600] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2360.161575] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2360.165168] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2360.165945] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2360.168660] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2360.171001] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2360.171972] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 2360.175812] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2360.182611] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:12:58 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2360.203471] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2360.212575] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2360.227795] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2360.234950] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2360.236165] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2360.238934] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2360.240535] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2360.242268] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2360.263702] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2360.267049] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 2360.267813] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2360.268845] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2360.269675] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2360.279441] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2360.280119] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:12:58 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2360.287959] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2360.327906] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2360.330661] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2360.334918] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 2360.335620] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:13:22 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:13:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:13:22 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:13:22 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:13:22 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:13:22 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:13:22 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:13:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2384.515255] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2384.516349] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2384.524686] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2384.528346] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2384.530899] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2384.532971] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2384.536453] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2384.537499] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2384.538717] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2384.538917] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2384.540855] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2384.543102] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2384.543235] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2384.545170] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2384.547123] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2384.630825] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 2384.633107] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:13:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:13:22 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2384.654810] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2384.656451] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:13:22 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2384.735451] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2384.738706] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2384.742620] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2384.744711] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:13:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:13:22 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2384.747405] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2384.827575] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2384.830055] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2384.834447] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2384.835605] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2384.839278] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2384.876803] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2384.879081] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2384.880383] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2384.881393] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2384.881543] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2384.882692] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2384.884773] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2384.886346] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2384.887407] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:13:22 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:13:22 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:13:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:13:22 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:13:22 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2384.889005] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2385.069412] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2385.076251] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2385.078637] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2385.079714] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 2385.112440] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2385.125993] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2385.131964] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2385.140641] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2385.148743] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2385.149876] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2385.151079] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:13:23 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2385.161465] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2385.165536] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2385.173706] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2385.174962] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:13:23 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:13:23 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:13:23 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) [ 2385.324907] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2385.329312] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2385.348476] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2385.350983] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 2385.351778] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2385.356083] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2385.359904] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2385.360703] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:13:49 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:13:49 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:13:49 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:13:49 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:13:49 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:13:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:13:49 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:13:49 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2411.781614] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2411.785690] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2411.792255] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2411.793738] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2411.795162] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2411.796809] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2411.799007] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2411.801101] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2411.802384] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2411.803502] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2411.804684] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 2411.806880] bt_err_ratelimited: 8 callbacks suppressed [ 2411.806902] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2411.808461] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2411.810167] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2411.824311] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2411.824940] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2411.826750] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 2411.827533] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:13:49 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2411.855786] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2411.862682] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2411.863552] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2411.875033] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2411.879116] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2411.881338] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:13:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) [ 2411.883468] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:13:49 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:13:49 executing program 4: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_set_cpb={{0x7f}, {0x0, 0xfa}}}}, 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x1}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 22:13:49 executing program 6: openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:13:49 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:13:49 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:13:49 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2411.886775] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2412.127623] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2412.129714] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2412.133343] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2412.136621] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 2412.144504] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2412.145733] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2412.162716] Bluetooth: hci4: ACL packet for unknown connection handle 200 22:13:50 executing program 4: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_set_cpb={{0x7f}, {0x0, 0xfa}}}}, 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x1}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 2412.169844] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2412.184996] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2412.187424] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2412.193834] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2412.270916] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2412.273627] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2412.275044] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2412.275984] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2412.329155] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2412.331370] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2412.333573] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2412.334674] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2412.337316] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2412.338121] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2412.338486] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2412.343438] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2412.344235] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:14:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:14:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:14:15 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:14:15 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:14:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:14:15 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:14:15 executing program 6: openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:14:15 executing program 4: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_set_cpb={{0x7f}, {0x0, 0xfa}}}}, 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x1}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 2438.240294] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2438.241558] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2438.242805] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2438.243993] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2438.254305] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2438.281319] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2438.282590] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2438.287322] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2438.297737] Bluetooth: hci4: ACL packet for unknown connection handle 200 22:14:16 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2438.302707] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2438.314363] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2438.316584] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2438.318920] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2438.320404] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2438.323031] bt_err_ratelimited: 2 callbacks suppressed [ 2438.323072] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2438.325065] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2438.334072] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2438.336376] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2438.337561] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 2438.338933] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2438.339143] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2438.384280] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:14:16 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2438.400857] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2438.402426] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2438.404580] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2438.406773] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2438.417676] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2438.443431] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2438.445713] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2438.455446] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2438.630806] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2438.637494] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:14:16 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2438.665869] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2438.667320] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:14:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) [ 2438.718440] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2438.728206] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2438.898405] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2438.905908] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2438.909730] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2438.910918] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:14:40 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:14:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:14:40 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:14:40 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:14:40 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:14:40 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:14:40 executing program 6: openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:14:40 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2438.916933] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2462.730215] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2462.735910] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2462.736899] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2462.738716] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:14:40 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:14:40 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2462.902981] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2462.904909] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2462.906399] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2462.913625] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2462.914342] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2462.916096] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2462.917974] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2462.919305] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2462.922838] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2462.923560] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2462.924512] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2462.928738] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2462.930094] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2462.931012] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2462.931760] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2462.934487] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:14:40 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:14:40 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) [ 2462.935215] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2462.956916] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2462.958955] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2462.969265] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2462.982393] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:14:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) 22:14:40 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:14:40 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2462.983710] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2463.082828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2463.119238] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2463.119875] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2463.123240] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2463.168457] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2463.170703] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2463.181493] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2463.182355] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:14:41 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:14:41 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:14:41 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04221f00004513f4000000aaaaaaaaaa0000000000000000001990db4aed6ba2b17ba73ccf872c668103e36f6a2e5264e35643d0fd8231553fd3b958e9fb0057eb11665b34ff411d9ee961b58a819f"], 0x22) 22:14:41 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2463.189101] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2463.309816] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2463.313608] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2463.314612] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2463.316897] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2463.317912] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2463.320623] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2463.321868] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2463.324659] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2463.326438] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2463.326728] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2463.328999] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2463.330905] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2463.332990] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2463.337948] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2463.339661] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:14:41 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 22:14:41 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:14:41 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2463.544827] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2463.546490] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2463.554362] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2463.555015] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2463.572782] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2463.576763] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2463.584270] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2463.595308] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2463.736608] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2463.738553] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2463.747628] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2463.748593] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:15:06 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:15:06 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:15:06 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:15:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04221f00004513f4000000aaaaaaaaaa0000000000000000001990db4aed6ba2b17ba73ccf872c668103e36f6a2e5264e35643d0fd8231553fd3b958e9fb0057eb11665b34ff411d9ee961b58a819f"], 0x22) 22:15:06 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 22:15:06 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:15:06 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:15:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d12722827fb9dfb66c8ed7145ea7e597e7bb7fdf0fde50e16783ba27dec95b243e83febc5eb4d47d29ab6d59f6e074a73dcb46bfc2212d49df0011d627861c83c27cc31529b26aa7136c9279a809dd1cf9cd912808a57cc15792b574d897ec4c4a4e8930000000000"]}) [ 2488.304891] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2488.309282] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2488.312746] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2488.315557] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2488.319534] bt_err_ratelimited: 5 callbacks suppressed [ 2488.319578] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2488.384608] Bluetooth: hci3: ACL packet for unknown connection handle 200 22:15:06 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2488.393639] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2488.404267] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2488.405680] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2488.408445] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2488.467840] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2488.473255] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2488.481655] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2488.487995] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2488.489592] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2488.495537] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2488.496961] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2488.498919] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:15:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) [ 2488.503762] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2488.508530] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2488.510995] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2488.512345] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2488.513662] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2488.516793] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2488.521530] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:15:06 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x0, 0x10000}) 22:15:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04221f00004513f4000000aaaaaaaaaa0000000000000000001990db4aed6ba2b17ba73ccf872c668103e36f6a2e5264e35643d0fd8231553fd3b958e9fb0057eb11665b34ff411d9ee961b58a819f"], 0x22) 22:15:06 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2488.532833] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2488.732027] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2488.739095] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2488.751762] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2488.753282] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2488.787976] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2488.975715] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2488.979481] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2488.987854] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2488.989716] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:15:30 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:15:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) sendmsg$nl_netfilter(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x168, 0x11, 0x9, 0x801, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x1}, [@typed={0x8, 0x32, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast2}, @generic="fa1f5f2d116d7296d936df0e1220d0068f2b0d9c0434dabcce18ca3db7b56b3703242e008af83b007a8bfdc35c716b17c37f68102bcfc4bb0784fcf4b9a0c22a099d8e868fc1f2474c74e20a528d341ecc0c57d8963deffb91c5a4be191c9d87da81ff9a2dc318cfaf8a3ca73919c58b2394c62108c5bf5551c8e9e2019e5a7d88cb8fbdb8ffc878208c88899780ed6b5706159ba576411e1e617cf1f6e721e65dc2f5eeaab38b51aa063b91f25c3321dbb7670d828aa21aaf33091494f2490258da608650d21ac9", @typed={0x4, 0x32}, @generic="0313d3ef1b4f7714517edb4f61f493e762ae7df05684d4e17a881a1b6165cf7e07f086205461c53e1caee794ea612132701ae3f03653ec92dcf2ee2af6f0534c9c3d15b96641ea1e25369e009a02b19998f3697678c2d40ff45dfce0b763eb5782527fb96f85503846ac3bd838cb2c260d83b8fa35fd3cb6"]}, 0x168}, 0x1, 0x0, 0x0, 0x84}, 0x4000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) 22:15:30 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:15:30 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:15:30 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:15:30 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x0, 0x10000}) 22:15:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) 22:15:30 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2488.994708] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2512.243617] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2512.246047] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2512.248753] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2512.249715] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:15:30 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x0, 0x10000}) 22:15:30 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2512.254869] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2512.357890] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2512.359306] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2512.364672] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2512.365573] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2512.368718] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2512.381836] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2512.389301] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2512.413109] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2512.414091] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2512.415933] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2512.416680] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2512.417687] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2512.421424] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2512.426688] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2512.428628] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2512.430131] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2512.431311] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2512.432986] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2512.439800] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2512.439954] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2512.452532] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2512.462408] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2512.470613] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2512.473476] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:15:30 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:15:30 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2512.483546] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2512.495136] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2512.754217] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2512.757118] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2512.760191] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2512.760970] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2512.771285] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2512.773119] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2512.775419] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2512.776494] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:15:53 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:15:53 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:15:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:15:53 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23}) 22:15:53 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:15:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) 22:15:53 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:15:53 executing program 4: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "dd2f2e", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x6d}, "809eabb899889f49be531493413d95d593700d510c8f088b0124769ddad81a21b0f6ded5bde22fde6630917e10556c2b6bd01f29301165fea7ffa6dd6e28ab78174a6abc8632ab1758784c1450663e8a551aefed5923fb2c0d4e227df890802a4020720083b2b9048605cbb135"}, 0x71) [ 2512.778698] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2535.963821] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2535.971806] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2535.975637] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2535.981532] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2535.997434] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2536.000580] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2536.001692] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2536.003884] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2536.008320] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2536.010770] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2536.011548] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2536.016308] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2536.017675] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2536.019367] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2536.023453] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2536.029747] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2536.033535] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2536.038460] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2536.039452] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2536.041657] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2536.042905] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2536.044095] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2536.046037] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2536.047919] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2536.048052] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:15:53 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:15:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', 0x0}) 22:15:53 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:15:54 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x1, 0x2}, {0xff}}}}, 0xf) [ 2536.049805] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2536.214814] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2536.216427] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2536.220863] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2536.221489] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:15:54 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2536.241337] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2536.384289] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2536.401905] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:15:54 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:15:54 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23}) 22:15:54 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:15:54 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2536.421870] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2536.422545] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2536.439801] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2536.474175] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2536.475544] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:15:54 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2536.485029] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2536.486443] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:15:54 executing program 4: setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000010c0)=@v2={0x5, 0x1, 0x12, 0x3, 0x1000, "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"}, 0x1009, 0x1) [ 2536.496807] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2536.508584] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2536.516485] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2536.519303] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2536.520810] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2536.602379] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2536.605679] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2536.607794] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2536.608925] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2536.649048] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2536.650697] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2536.653739] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2536.654604] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2536.754524] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2536.756559] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2536.825883] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2536.826635] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:16:16 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:16:16 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:16:16 executing program 4: r0 = syz_io_uring_setup(0x7bd7, &(0x7f0000000080)={0x0, 0x4cc4, 0x2, 0x0, 0x20a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r0, 0xe0, 0xd57c, 0x1, &(0x7f0000000140)={[0x8]}, 0x3) rt_sigprocmask(0x0, &(0x7f0000000040), &(0x7f00000001c0), 0x8) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{}, {0x3c, 0xc8, 0x3b, 0x6, 0xf801, 0x6}}}, 0xffffffffffffff30) 22:16:16 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:16:16 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23}) 22:16:16 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:16:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', 0x0}) 22:16:16 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2559.153266] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2559.156644] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2559.159337] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2559.176040] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2559.181436] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2559.189657] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2559.203578] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2559.215487] bt_err_ratelimited: 4 callbacks suppressed 22:16:17 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2559.215511] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2559.224787] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2559.230471] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2559.238972] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:16:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', 0x0}) [ 2559.251706] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2559.252531] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2559.261932] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2559.269624] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2559.272658] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2559.282635] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2559.287058] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2559.310651] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2559.322799] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2559.367830] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2559.371832] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2559.374127] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2559.374900] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:16:17 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:16:17 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0401010050e54b8b1932e855ed4a4a5de8abbe0215a0c90c0941092823e91263f0f1c9c9fea14e5a54382ae509adfd909f38e1a0e887cf455693073771b6c0f86eb7f03ff05f5a1076c49916e7948a4334e4cc85fd3cab67ca270500da758c3b9e348cebe46a2cbfd117ab6896fcb564e119cf1249b1608f34bd800000000000000000000000000000006b"], 0x4) [ 2559.379002] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2559.491295] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2559.493283] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2559.498853] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:16:17 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:16:17 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:16:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:16:17 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2559.635263] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2559.637532] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2559.645701] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2559.646503] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2559.647561] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2559.649639] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2559.656195] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2559.677839] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2559.678897] Bluetooth: hci0: ACL packet for unknown connection handle 0 22:16:17 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) (fail_nth: 1) [ 2559.727850] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2559.729065] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2559.733617] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2559.734493] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2559.737439] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2559.738357] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2559.778777] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2559.781614] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2559.783252] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2559.784048] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2559.785998] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2559.857660] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2559.862181] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2559.862833] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2559.865481] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2559.923848] FAULT_INJECTION: forcing a failure. [ 2559.923848] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2559.925729] CPU: 1 UID: 0 PID: 14732 Comm: syz-executor.6 Not tainted 6.12.0-next-20241128 #1 [ 2559.927066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2559.928325] Call Trace: [ 2559.928774] [ 2559.929175] dump_stack_lvl+0xfa/0x120 [ 2559.929912] should_fail_ex+0x4b1/0x5b0 [ 2559.930607] _copy_from_user+0x30/0xd0 [ 2559.931325] __blk_trace_setup+0x96/0x180 [ 2559.932083] ? __pfx___blk_trace_setup+0x10/0x10 [ 2559.932934] ? __pfx_snprintf+0x10/0x10 [ 2559.933659] ? srso_return_thunk+0x5/0x5f [ 2559.934450] blk_trace_ioctl+0x137/0x270 [ 2559.935151] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 2559.935931] ? trace_lock_acquire+0x13b/0x1b0 [ 2559.936753] ? srso_return_thunk+0x5/0x5f [ 2559.937502] ? lock_acquire+0x32/0xc0 [ 2559.938182] blkdev_ioctl+0x108/0x6d0 [ 2559.938881] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2559.939639] ? srso_return_thunk+0x5/0x5f [ 2559.940388] ? selinux_file_ioctl+0xb9/0x280 [ 2559.941212] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2559.941973] __x64_sys_ioctl+0x1a7/0x210 [ 2559.942720] do_syscall_64+0xbf/0x1d0 [ 2559.943437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2559.944319] RIP: 0033:0x7fa42b8d3b19 [ 2559.944966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2559.947698] RSP: 002b:00007fa428e49188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2559.948924] RAX: ffffffffffffffda RBX: 00007fa42b9e6f60 RCX: 00007fa42b8d3b19 [ 2559.950075] RDX: 0000000020000200 RSI: 00000000c0481273 RDI: 0000000000000003 [ 2559.951189] RBP: 00007fa428e491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2559.952312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2559.953437] R13: 00007ffe2583ffdf R14: 00007fa428e49300 R15: 0000000000022000 [ 2559.954608] 22:16:43 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:16:43 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) (fail_nth: 2) 22:16:43 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:16:43 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:16:43 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x2, 0xa}, {0xffff, 0x4, 0x41, 0x0, 0x2}}}}, 0x17) 22:16:43 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:16:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[]}) 22:16:43 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2585.435391] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2585.437732] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2585.443665] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2585.450612] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2585.452701] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2585.454262] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2585.458385] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2585.459912] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2585.461360] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2585.465527] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2585.467044] bt_err_ratelimited: 2 callbacks suppressed [ 2585.467092] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2585.476407] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2585.480588] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2585.484054] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 2585.493019] blktrace: Concurrent blktraces are not allowed on sr0 [ 2585.501375] FAULT_INJECTION: forcing a failure. [ 2585.501375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2585.503614] CPU: 1 UID: 0 PID: 14745 Comm: syz-executor.6 Not tainted 6.12.0-next-20241128 #1 [ 2585.504960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.506236] Call Trace: [ 2585.506677] [ 2585.507075] dump_stack_lvl+0xfa/0x120 [ 2585.507200] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2585.507767] should_fail_ex+0x4b1/0x5b0 [ 2585.509668] _copy_to_user+0x32/0xd0 [ 2585.510367] simple_read_from_buffer+0xd0/0x170 [ 2585.511210] proc_fail_nth_read+0x18a/0x280 [ 2585.511991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2585.512844] ? srso_return_thunk+0x5/0x5f [ 2585.513590] ? security_file_permission+0x22/0x90 [ 2585.514423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2585.515275] vfs_read+0x243/0xbd0 [ 2585.515504] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2585.515872] ? trace_lock_acquire+0x13b/0x1b0 [ 2585.517792] ? __pfx_vfs_read+0x10/0x10 [ 2585.518353] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2585.518466] ? lock_acquire+0x32/0xc0 [ 2585.520118] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2585.521295] ? __fget_files+0x34/0x3b0 [ 2585.521759] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2585.521957] ? srso_return_thunk+0x5/0x5f [ 2585.523827] ? __fget_files+0x206/0x3b0 [ 2585.524550] ksys_read+0x122/0x240 [ 2585.525184] ? __pfx_ksys_read+0x10/0x10 [ 2585.525378] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2585.525868] ? trace_x86_fpu_regs_activated+0x130/0x190 [ 2585.525984] do_syscall_64+0xbf/0x1d0 [ 2585.528507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2585.529397] RIP: 0033:0x7fa42b88669c [ 2585.530033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2585.532757] RSP: 002b:00007fa428e49170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2585.533977] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fa42b88669c [ 2585.535090] RDX: 000000000000000f RSI: 00007fa428e491e0 RDI: 0000000000000004 [ 2585.536210] RBP: 00007fa428e491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2585.537328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2585.538456] R13: 00007ffe2583ffdf R14: 00007fa428e49300 R15: 0000000000022000 [ 2585.539616] [ 2585.559005] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2585.561403] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2585.569860] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2585.571515] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2585.576463] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:16:43 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:16:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[]}) 22:16:43 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x27}, "1ceb24ea9eb3e5e9647ac8a406162258f236d4398869ee0a680e4e6e970bfdb8ab4febe00ce550"}, 0x2b) 22:16:43 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:16:43 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:16:43 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:16:43 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2585.590442] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2585.938288] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2585.972206] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2585.973491] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2585.974715] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2585.976188] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2585.976397] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2586.010996] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2586.013372] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2586.014578] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2586.016488] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2586.017927] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2586.041448] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2586.047488] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2586.051751] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2586.053805] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2586.056941] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2586.119408] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2586.140045] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2586.144767] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2586.146913] Bluetooth: hci0: ACL packet for unknown connection handle 0 22:17:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[]}) 22:17:18 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:17:18 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x200000) 22:17:18 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:17:18 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:17:18 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c900e718d63052ac1d3efe23a04b6d5f1090ffa77da70ae1f9174e1ca5355ad29d09397664693d292450578c3bdb64454bd2d0c86e59c050cce262038b67e35c8a095db0eac6e594c34d105efda1753cc4f22459d55b3aec50dfb56a1cd945c12c48d751809fe1cb4d0497efe23e67fd3e595214ce532522538ec36d47ac95cbbbd574086bd0e2a393cdd367fecf28b31146dce20dfe493f0ea60308c1c3aa54f9f9f7f85af4923e7fecc9d838a08eb68b9243030d926a815807f5815530baf8caf8338e2bb9a1b8432ea710b1afd255d167af4de6a0ada1926da000b50da8858cb487fab849af7becc4"], 0xeb) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 22:17:18 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:17:18 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2621.169755] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2621.172999] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2621.175076] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2621.176038] blktrace: Concurrent blktraces are not allowed on sr0 [ 2621.178289] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2621.183041] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2621.185350] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2621.188336] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2621.189609] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2621.190066] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2621.195876] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2621.200410] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2621.203745] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2621.204993] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2621.206188] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2621.211597] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2621.214566] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2621.217486] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2621.218326] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2621.218851] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2621.221482] blktrace: Concurrent blktraces are not allowed on sr0 [ 2621.223457] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2621.223589] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2621.227043] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2621.227362] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2621.230366] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2621.234568] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:17:19 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:17:19 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xed59, 0x10000, 0x0, 0x3}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:17:19 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:17:19 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 22:17:19 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:17:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) 22:17:19 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:17:19 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2621.241370] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2621.472075] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2621.473586] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2621.478843] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2621.479665] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2621.483523] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2621.486609] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2621.504806] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2621.510498] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2621.517383] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2621.518445] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2621.531634] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2621.532628] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2621.540361] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2621.552756] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2621.571415] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:17:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) [ 2621.583520] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2621.645886] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2621.676357] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2621.678590] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2621.680870] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2621.681697] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2621.690317] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2621.699815] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2621.700654] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:17:45 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:17:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) 22:17:45 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:17:45 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:17:45 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:17:45 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0401010048d4ed024d5744c81f6c368dfb023f620ac7e406032b13c78b8479888172638861d5eb0bb16956e0909523586a724258224cea636e26af60fc7b57d85393e16efa39019e8b24fd49aec6c66bf108516531a596745f1446033c5a658d0e794c932034b00f130d18582c264f5e87fff2152bc7713a55213be22c54f45d07257f2f7b4d02b00ce210bd3da5dd8aaa33eb2fa5fc633b3c6122d6f88c50719b59f7c0d9f0213468791af4f423772eae55a4708afad5faf8192e72a442a4b8fb83cfefd90f31dd66f823ae3ca4cc10cf56"], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 22:17:45 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:17:45 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x4}, 0x4) [ 2647.771974] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2647.774066] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2647.778600] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2647.779659] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2647.783277] bt_err_ratelimited: 2 callbacks suppressed [ 2647.783301] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2647.803509] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2647.805701] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2647.810977] Bluetooth: hci4: ACL packet for unknown connection handle 200 22:17:45 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2647.821709] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2647.823937] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2647.824013] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2647.832777] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2647.839009] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2647.847059] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2647.848927] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2647.851768] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2647.880707] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2647.884052] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2647.886864] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2647.888859] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2647.892482] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2647.894024] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2647.894816] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2647.897835] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2647.901560] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2647.904006] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2647.905587] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2647.932261] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2647.949307] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2647.951920] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2647.953838] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:17:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b029db3ea7ba63fd3c9a17319d2774f06a1a8f2c9885bf9af6db564c71fd3c2e5f8aa5d45d8d03762a98f8db2b6f679306d2a9fd6d"]}) 22:17:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0xb, 0x4, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x0, 0xf, 0x0, &(0x7f0000000180)) read(r0, &(0x7f0000000080)=""/244, 0xf4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2c6a00, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) write$evdev(r2, &(0x7f00000003c0)=[{{0x0, 0xea60}, 0x4, 0x1000, 0x389}, {{0x0, 0xea60}, 0x1, 0x1, 0x401}, {{0x77359400}, 0x17, 0x2, 0x7ff}, {{0x77359400}, 0x11, 0x2, 0x3ddb}, {{}, 0x3, 0x9, 0x5}, {{r3, r4/1000+10000}, 0x14, 0x4, 0x20}, {{0x77359400}, 0x4, 0x2, 0x3}, {{r5, r6/1000+10000}, 0x3, 0x3f, 0x400}, {{0x0, 0x2710}, 0x3, 0x2202, 0xd}, {{0x0, 0x2710}, 0x5, 0x18e, 0xffff}], 0xf0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043607a4080b53227b2ca6c4ce162e930638ad57a1ca54291a1b6a2a6382e40baf3615cdab64e5780b79f224ecffa2f1874a5ad063ea620b375cb3d18eec758b5187ac82b09df7139befc068287483c448edce77483474bdb873f09a998ad4bb3cd27a5c3f3cdf843fb396a426f09e8027f31a36a0787e3a4fcf180b1d35dfa61fbeebd5852ee51fc1b53b06ea0b3934792fbeba1733f0d243d221dabf110c420a03467f936412d9790dc64ae897ad30e7f24041cc9e4cfaed2780244a0a4ca034b5d8155f79a3900029"], 0xa) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000300)={0x1, 'veth1_to_bridge\x00', {}, 0x1}) 22:17:45 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:17:45 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:17:45 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:17:45 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:17:45 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2648.104049] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2648.110545] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2648.117275] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2648.119608] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2648.145700] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2648.146337] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2648.149571] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2648.150837] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2648.152459] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2648.153759] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2648.155955] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2648.157350] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2648.161044] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2648.161522] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:17:46 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2648.164516] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2648.230348] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2648.234874] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2648.236046] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2648.236789] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:17:46 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:17:46 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2648.345357] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2648.376534] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2648.386032] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2648.387723] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2648.388447] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2648.389254] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2648.428960] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2648.429988] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2648.431260] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2648.431899] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2648.450995] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:17:46 executing program 6: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x1f, 0x7}, {0x6, 0xd10}], 0xee01}, 0x18, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000000c0)={0x0, 0x2109, 0x1}) flock(r0, 0x6) 22:17:46 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2648.524255] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:17:46 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2648.537135] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2648.537914] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:17:46 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2648.556949] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2648.563180] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2648.566795] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2648.567500] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2648.568719] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2648.569562] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2648.618627] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2648.628433] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2648.648761] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2648.652589] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2648.655399] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2648.659391] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2648.662210] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2648.662849] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:18:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) 22:18:07 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:18:07 executing program 6: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000140)={0x7, 0x10001}) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x40, 0x2, 0x1ff, 0x1, 0xfff}) 22:18:07 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:18:07 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:18:07 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:18:07 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000040)={0x1, 0xfffffffffffffff8, 0xe0, &(0x7f0000000380)=""/224}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0xf, 0x0, &(0x7f0000000440)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480)="fe77459a7a158bee95e4400aba5dad00ae90e19a62a3a110acb8496a7d018a2d2daab44e91832304a186a10fa91a87f8cc5a2d7c843265e2b63b6c513615113a4cd37cf9eacf28bd96573da72d7b503b09b4b6ded7a41daaa59c709cf0a674b7ee740afe6a7fbdbb0845c9f1a4a4b2506cdb902b1ecacdaf76b737856795b46c6978f1eb9d92f74d0a78b2fab8b695e673807d3443bfcc0c43d8e5914db55414e26c5f4f2cc9dcdfe7561720ff7872cd8213f11f1f22065ca683d754d3d5a2debcde9b2575", 0xc5, r1}, 0x68) 22:18:07 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2669.497413] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2669.499353] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2669.503312] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2669.504642] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2669.506257] bt_err_ratelimited: 10 callbacks suppressed [ 2669.506300] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:18:07 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2669.507382] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2669.589340] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2669.594440] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2669.611557] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2669.619050] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2669.634004] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2669.639263] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2669.642802] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2669.645701] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2669.647875] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2669.649392] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2669.652041] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2669.691220] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2669.695465] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2669.703153] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:18:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) [ 2669.704679] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:18:07 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2669.716718] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2669.759088] Bluetooth: hci0: ACL packet for unknown connection handle 200 22:18:07 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2669.779496] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2669.801806] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2669.806417] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2669.817250] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2669.819000] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2669.833542] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2669.834916] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2669.836741] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:18:07 executing program 4: shmctl$SHM_LOCK(0x0, 0xb) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) [ 2669.843897] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2669.984038] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2669.986393] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2669.987832] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2669.992639] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2669.997814] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:18:07 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2669.998037] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2670.036899] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2670.071224] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2670.074289] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2670.075202] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2670.148586] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2670.154097] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2670.157282] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2670.160502] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:18:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) 22:18:34 executing program 6: openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x20e802, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x400, 0x10000}) fcntl$setsig(r0, 0xa, 0x1e) 22:18:34 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:18:34 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:18:34 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:18:34 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:18:34 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:18:34 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1}}}, 0x4) [ 2696.350396] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2696.354227] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2696.360687] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2696.362023] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2696.363347] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2696.364664] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2696.367531] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2696.369255] bt_err_ratelimited: 2 callbacks suppressed [ 2696.369298] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2696.370530] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2696.372930] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2696.374872] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2696.377197] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2696.377493] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2696.380815] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2696.383204] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2696.387774] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2696.390665] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2696.391916] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2696.393623] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2696.396016] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2696.403921] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2696.405984] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2696.416978] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2696.420434] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2696.421947] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:18:59 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2696.428487] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2722.178802] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2722.182727] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2722.185817] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2722.186522] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2722.187341] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:18:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400000000000000000000000000000000000000f2ff000000deffffff00000000f4f5f77f5ecd606571b0"]}) 22:18:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = epoll_create(0x1) dup2(r0, r1) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000440)) sync_file_range(r0, 0x0, 0x2, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="f85e9ced90b375a486600e3aa2b4e46041e597a385379d13412c06007aef65bd254a451d57ad2469078c448ef7e7618edcc30ad30c00001350cad79546124675be517ae3c7b0de38a306bd8c0dcb73670250b85164fd1f98b3e6ee92cc6829cc15ff8f379dadfc8b701ba876ac3745968e6e11e85ff63c186b777b4c96936e87398ecbfd32e1eb3294fa77f81f413766"], 0x4) 22:18:59 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:18:59 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:19:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:19:00 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:19:00 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x70, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb11}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0xf, 0x0, &(0x7f0000000440)) stat(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = getgid() setgroups(0x1, &(0x7f0000000000)=[r4]) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0xf, 0x0, &(0x7f0000000440)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0xf, 0x0, &(0x7f0000000440)) r7 = fsmount(r0, 0x1, 0x73) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r8, 0x0, 0xf, 0x0, &(0x7f0000000440)) [ 2722.191203] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2722.192553] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2722.192843] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2722.197351] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2722.198809] Bluetooth: hci4: ACL packet for unknown connection handle 201 sendmsg$netlink(r0, &(0x7f0000002e40)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c80)=[{&(0x7f0000000340)={0x1350, 0x33, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x7f, 0x4c, 0x0, 0x1, [@generic="b79089ae198f02c1fbfdf610ba3406153946d96328565b86123e6c3ddab05f70534d1f219cc98d1998d855fb1a5b0e0cc98dfd6aaf8d925d3c31243f840681e24257a0d8bcfc03526a2351e2e5de9a5029a38245ea4923d46499ff29bee12be125240dd9ea11be4806ec8ddb863eda66afece94fc910a50d1517fe"]}, @generic="27bff4537e0fed58a85428ac79005f6638f54a54d7df81b98902abf88b91e583db9a7893cd01a53862c065a19d53bd3d9b0746724e08d63886c7a227e3a4deba30c6fe52900443f691680a7d9b2ca6b86c1ce1a5a2a9b5e1a318d8af7e10a517eaf50bdcd98c9d9aed", @generic="df5f317a484c267c287d053abb15141054434740a949e031d70c05e240ea7abe4ed094974451c05b74d4e7f53b019b307e53a3460c3c16e956300000d39bbef9e86bba60cd3146dbcf55edd1e4d1ffef49d474196f73902c14da7ecf44444777309fa9d0e7a706bbf12c9fad67df8e3cc1514a06fe3d59f4aeef28cee25eb3c1864a7c612923dc3ca95d148a9250ba66fd77f86d0c4c52fd96eb914ac107e482d2bdfa7a61bf74c3fa8f9aa988b26e8c5b9b16b8950a8461eb0433d2adb95671443841df5d6a1f742a1900e861500b", @nested={0x1188, 0x2d, 0x0, 0x1, [@generic="ce40af3f6b7850acefcdff0698077b53e4f721c5b161ed7765d8975c87e17e5449b014512d96bbfd35798220069d4ddc642f04b4b5648dcd2d1e76daf5566bd09b56e4d90b8e0efe43ecbabd485e774e6f9c306e4c795a55821e01103b3878d0a2f81767f717a09281c97ac1131dda39a8f0e777e4c2061d8df22166967f763015011ae22fa6f927823319507159e9891860522cbafea4ac56395a95c195bdb3289ca3789ac242d78a90df6165af503502663a1f386320f79eca804abfa5cac2f6ede08e6a16750a40856a76fce08ff427c26f018ceb04b400511b397b71c64df9befa6b974c27abc5b93adaf4ce85c069cdd2d678379c265d65ec365431327220ed763dd74a6334d3dd93567e8153555de53ec88dcfc91716178cf35a161669ab8c4b4a712b624cdd9ecee2b05ec1ff0ed3b3bf49b927a1801113fab4d39ff315c6f06a5652b74a0ac825bc4c435e4109221d8701ee32edb974b3b910d962bb4401053aebe8a6000eef3ae2b6dde12eb24510ef16762846a96bbf859dedaa78d4969bf346c3213797d53f48e2befc7b6bd1162ff384ea40682b7cf9814966ef6c594acceb08ce38439b8b1af1356aa4a8639e3fa81815e61d96cdf54abcdf5035d501f81821cfdb586bfcc7268ffbb794dabedf7eb4eaea24aff9fba311ba0ec36c06b778bc8aad85e7f922f56d9e66fa619d88a7599e71b2c3f793cfa3bdad8f4c2b8597ff8219878789c973fe8e47fdb33d30a4d4c15ba1e02ae553156de49f1fec234a5f8cc49277d600b754a6b112343ebad6ccc6780473a852449c63f5d2bb8c09318ef16880de7b336fdeeda0db7617fbf32477a9f5117d966a948c2d81b86289ff529b22bab87a4bc08b2c46b366c6b79cd85f0cd9a64bc2c435322bdfc6963e85d1735ec02c8cc622eac90ea8d84a5158d3914e550daf359e4e8f98d250aa22bd02832e2d23e9c558f997d58c9cc79746455e515745acc7536a060c9dbfcb965749aa96b09857e01325f688411d4ce5bb1e3e5cce79d292469dbf10b9afbcee8677db6d1d3dff6a548d9ad36e1698c1b61d69e1e7df7dbbb7b220c6029eda374bea31280191255d431fd9bf13c96b64e9b7f620e408d1496f3ec18434dd42a74619df01e10c5726c6e30994a70e20780f4e148c15aeb152727da2a06f0d9fd607fe788b323f4e9d21c95dcdc2a4910441cdb44ece6d15d064a2510e8d51b3ee4557594b868868fb18bde9ea12c080ef59c969b13946acd562d7f4d7d3ffb037e2fe253daaa888fb21853541fe9286e0f7ad72f46fd327409ac1dedfd59842a1a4101e9b177acafc79fd8f99bbf0d7ac11f0ef3ca2e0dcf99ebab5dbd691d6b27fec466c40922762a53598b851aeaee20c7f905402701df5cdbd9eca1edc1093a9dc56d6310dc2b45143192be1cfdeb07271b844989a3781b3ba7c072cb9e283ca8556ad7c72f96ef02157c92aa1dd825060d14ebfcf876f1a22700f9515c28485b8924f8ce0d0f8d86af6565ef3bdc05c300303b1da08fa3780f1cd00aec6993599fc99740fd0a6bf10e49c010d964730a56f2a4e2ad31d41de76ec19ee2a2903c4e73bd5583788cff2ea4fc1ca8257c306b3fb2bb06ebc1085a28909ffe3cb4ee68dfc281047632a0889070b11b98604a87729b153facd98847a07fc8b9cb76ee816f3d2eb07961f8762ba55ec9436c61bb914ad94113490052a11511d7ad7feac13aaf41d2b9d85cb0168429d48738bdff91f128b54ec98d760777fe8ec34b480de50818f3640e097cc46a3692d69673a2bace4e0436003e1dceb7b8cf19cb2f69fe667825f8f7b4a9008a3f45029c928d6adf229394cd8f72ef488f53734ccfbf781e717af9a9510aab12ce2fb7da3c41460c85e731695987baf051be14438389d2141b1445c87d25460e3986f7cb69e7be379f1cb8759e0d6e73adb44e13162cd71bc7387163c1a9d8ab6855313e0fae4cb44a7a1a6c790771e2c0372c871a308940883d735a019194a972978f21a6373a2aada62b9e1cca8f814aae8c0847d34aa69fff11c96f6523dac8e8fde852337e561e7bb6b397195ef0b09dbd98d1f673f9d168f29f279ef3dd1d20cd3a0685e4cf0a0f28d7579a2d467f2d52a72b01da4c79b877671cd185f0a06c8e3e227744d24a8d0d002be76a1dee60ad27986d64227aeddbc5e927a97db5338028da23241c6447bfe4a3026679a7aa6d0160f9516401a8bdf8170b07fa237d744b45c50faf1040c7d5833dbc88e3d75a55afa9a466e8a13c45aaec35c7fe4cb54b5f07c36bb7933f81704d98119c61c3a010d4bf756735fbba9b0a90188175e954202b08c4044e3a138ac29339f7909d9cc734970ac14a07911bee6d612eac4cef975a7ba6e107d0fb592e61af85ec2ad8c16fce7b27a8022cac568aa05aaf11965f4a883d43c1c32fa0ce26b2cd7b793a26d5f0d3d98708a5e23c157ba8d619ee0401b92f00bd2a0af9402f93cb59e5bb92d64875d38031d96fe80aee62178dad3e9dacef7c2691ffaecd515eaa6bd37ccf81a47382b3fef586478cb8e731cd0ed329a83d638e26dc289a4cbb4552a36afa04c275ff2e100c94b996804e2ed32b00f2fa8a1950624b6e2e82f688f6c8cc593add1892845ec1424797e31bca6dde086a67e27b2eb16a5369a3fe871817e4a55d6e4b81b08ae42a70c7d756aefe662d7bb3e2190c038b3d7a532f7c04c2b90398498a3f0de79b2e35e56159bf6ad9de1d412ce1f2b35118c6decf2f32ffc079797e86bb36c05e10af3cab368da794c07fa76d87d02d903a1aca3864a8b237b326564f75c52594c989798f07feb988d8638a3b5de3e381bd542ed5a2c56d341e9d42316c84072bac9df9a23b5a8b8be2dd00f61bff2e5e93ef79559cfe1fd57079443cee8deff154c2982a47985435a04dd7c2ff4967861ed5484d5694daaf0547237996662d4e7b2c7759ec029cb9e0ded3cc75180577a6b1f005bda0d60e3ceb3f744280b77f2cf41f23631734eb33ae0d17959f847aa8ac558643c8e2064b6c8cd2d046e4aa920ce759221740e207d979d28341952df690fa7f71c3b05f6f7eefb58ac6f42a963574869cf050188e033769caf6d37ac8dacec938b4051a73827439de1e385e4d4e9edd0be48e4ec83ce52619eab8409bb8b0c90d0a2db8798ff50e93839ac8aaca235bbe4e0cd262cbfa6a8dbfe8b0676cb3711fa59b70cd6f7e5b755574ff601ac54d81ffb4f48e9a3433393d7f605a1e3d7f8e66234cfbb14838ae1e2bcaa52e8fd3f4be846f1008a687fea1ad90cf8b8555a5b0c27b0b9121a14a07ff49c22450e1237082dea0be763436c061169eaab042a3c1ce3f803954b75cb6f1655fb1a0521d3b4e04abe9cabb9ad480564c7e42b99f3683f47ce8119fdb84950ac235654cc810d7c53fe3a9f050f7131d44deb82cbbd5823af6ca4f68f0a35e29e78d21489e54feb1525a08f905ed126249193bfd7d65bca9435b1bd9ee29b815b260cdea93a6821d74eb74ef589f889bc7f14d25e513c933ac367876e6a4dee2c1638017780b605b342d620e1a970ec842fdf99f5070f7007abc462968754b06f64cde0d208a8f799e0e9c604e38b69dc64ee9f48071b02e7dfd10ef6a098b901f86b9740d35faf3cca31ed008cbae55d57f56e48cb6e6479576482c4d2446771a391a8d545f49aaee95dc7f952d89acade109f3b680a4a17bf2ffd2b84dfc1db4884ceb9d2f5da10c912f60b67b058544d9073d403d10be8de016b9498ac5e528d4a89a51e37c344244ab10e9431aa3e00a72bbd192bfdd1c536d40568e458e39bc28a43f589f7319da96c481061af4ebd782dee974532b9c91ce4b89bd6c3f56584c9f14a240e0575072b169729460c217f711b375acdd7a01be45264d3a1a98af5a7f3d2605d11d1608fbb87bd2c573bbd301db385acfca13e2ecd50eb1a50db784968fb0998513b21611203bf013e1b51616b135a502fc02486a8e869703ec551bf5d90ec0886b53233ada125a2748d05fc67e2aee7473c1b1b263a394592008cb0532899959138fd0d5dc35e4ade3cdaa2a32ffd0071a5ce151c50a2cf9c7733e9bf36b85233ba036291027be462be207db51b07c596244c9dd7ed245bab3d4ad0bebd49c30b72478155ae71b8560be3a4e4b246e77d563f5e518d89cecd830eba63c5471609b9287a400c794d438f9fecc75fd882fac6e81f38b726b7ab68c39a01a2778ff05674d69101a13a8bda911ebd598a6bdd878e04e45fe8d66a62754bf228b4aecc124021f4c495a8ee950dc0644bf60fcab6c7f099f0695ba42a4f47156c9e9bd29d31ce8d9f7610abe39b4f1fc3c69dcd03f8c043ae851a284af9fa9bd434329ee70e190fa07226ef5297af119a2426cbed3ca09dfa8f51b8ad8e7d7c1de762291d5dfcc49727bd74719a81b86399a041569b9495b173cdaeab1dacab4b2696e05a6bd2f8a7b97e338a167bf0da399f3204c8f9032abb7cddce55605015cb438fc8124c2a92d382b2a1ab929c2d21c31b70f40c549916e35be7b3b9ead84cf4d1da1d38b12a2754acde2349236d105ed638b753fe20cd5496c75e58bfbc3ae84b0dbdf386e9107b043bdb979dd3ae5f6ef2c1086f3e5ff4c8d663363df41dcf9027389d99150a26d7128e33651e26857302e64689d81d7943b11f51b5ee4228ad74230f00fba0b7191d573dde5a9f5864ef81ea6a63626c7630ac8c9a44d2cb12d52e0e576df4913ca8bb1432f6a10cd3b9cc617ee3421bb1e4f98a8271f835f82c7df8275b26e78c76ddac3001cae404674c2a4db0b17799edba027dc1fbeadb62b8ad9754b3b2e9000d88c0069b565604e014ba6118f843854a740cdde3bf546438769b28cc3009e2cabd42fffc127faae3388763d766823e52ffba35c3b3fc197e52cfb2e4f51f358a57e8e7d8bd999fef3a8953f9c4cbe0c7e280dbbf4318d99b485679053013b6451374c681d10d97aa94e1aa45bbb94e0c9a55e797bad2b57417b7e1f6b5ffac7a48e883dc9a25d0868a2a22e3d8aae5ccf1f9ac342f3e9b7c275203266008e39ee6b18e703def95935bc727b24b20dcb759e055ea8fafd9c513eb0c9eee46074f6ae625afaf52a1d9126e3f445ef3b2f3ae3de6a46d1f13dbc026148c30b1bea55ed67881c2ebc01c17e991b6ca11dcbdf318ce9d9c813636d9c9c4c05d5a353dd9c6435fc8eed423fc5b1d6fdbfce3faa85df438393d651ef0b42d87074ada355b0f3103aead9105d6702b7985dd985f46db2a622530dca7a8cfae214cd71cc00a6254d5040997ad1403438092a13ce236a30e7db9170572e8e243d22d4fe25cb8bdb97bf248e1d39e7311f6e2fe691696283f0a119920e4d427b42cf75c65e1a8c877abb22bc7c1c8b1cec4529db36564203577ad75430937b5527690b6ce2fef5e090a0a68f5ef7b472058bd28663b5da3ec77bb4aac881a45d7a3b687fb74552c8eb5598271e235514b0167c4aa3e8c5e04f540d78b3e732879661b7082e659cc636c187005596499438dcfe2d10f5b4c18a02e360ed01d128949d0e7691a9b4eb827018b0320a13d2c30368d07c1d71d990e719d1ce37b6950aeac83b8f82d9fff010bf30ac79dd4f64838eb4465b7cd0866fcdb2a892d31971206fbbb448f48a50e668d7c07f4588125ba39921f3dcc5d3eb167c1454569b6f56992aec5a23c3e65d4bef8192d4afa3b16b399576895a079d05780576ec7404200c4c826599524518abc7c586b38fe1aaf36ae649cdd8b2aa7cbaa19907b95c4e487270a4d", @generic="114c657d928bae1642707db1b0cb1e4d22e4033e45f44d516b736d7ab02425bd8453f5416ac48a925c049496c93dc348870ef6889916470000133ef2270f3a9f1a105d1569950c5110013d74df050193aab4ed2dac67c0a396b380b8c1e9bc568fc4ca6a9745c5d569ad9fc3faf13848d7da51160caedb1a773edd71a8fdcd486113772f51baaeafa25e77663513446d201fcecaedb16027faf791a23b304fca52bcf84272bee86124e2b9ae5d5ee542909dc456d1b919de80ef766ce5812b262d868abda162d991f24c8d5722977478a23adde9ce5ad10286f1e8f56699994f26625c56c89941c62098240e0183f84a8267", @typed={0x8, 0x3b, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x7c, 0x0, 0x0, @uid}, @generic="ca50adee07fb52a0ce6b08343f61b6dce1c1c9c0f01b859a5d48f6bdddb56262064d32da9960c61885ce4d80d972a3c9e24c0db58ab0053b39c84d1f11024db178177a52557352195fdbe6eb5cf82ea51e215ed959a20a7ef7a94366c3d4a4070172234d8555f6dbe2135e0d3ef5284088e7d4e625ca7ef80400e3c9b8fad1dba09f"]}]}, 0x1350}, {&(0x7f00000016c0)={0x158c, 0x29, 0x8, 0x70bd28, 0x25dfdbfe, "", [@typed={0x9, 0x65, 0x0, 0x0, @str='syz1\x00'}, @typed={0x101, 0x57, 0x0, 0x0, @binary="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"}, @generic="0f51b4f1e9f5d92c5517c02d67fa777423b5ec36f06f0e27f41a0366fe42a2c8384dd55566901d9acdea6db7b716a50386d95985db9ecffd3417e9b56f254c8b0684b798adfe7acac56bb9b18b26c3e54a7b2e8b0951f45784c78651a2c668e22dff5b104226af5f75a8cefc4afe387d73df8b8ae8bb0f7db05ada4cf0ed85cca464405ec3de8fffccda0b3595", @nested={0x1b6, 0x32, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@multicast2}, @generic="8fb817ecd6384a09f3ee58dc4002d17476db60dacf2997c10a4ad669ee1cecd78c7a6c1857cf66e18a76d2960d7300652182dc77a32cd1578918f6b7e7db736f00e4", @typed={0x8, 0x66, 0x0, 0x0, @pid}, @generic="823b4d3e3a9ff0ff360416d11dded9fbea86145198bba2efab08f5b6b90feae9b7044c204488f45cbae417f1f9adb97315cca2af196cfc6309a8eda70331f3b3c54fc712ae45e0e1e558ba13d8d1fd45362d37843f49bb71e621599eb695475c1e4b984abdeec961501d5334f54f5bc0758dcc8f9e8fddf1fbb0808de8365c4dbf6984f8094a19b1e6ec9d860b226d132425e948312d0eab4867483251a6f5d5b7bec6de86cde859aafe728f730bf388e4043c2c5d7571db96ac03300635324fe9f7718a58f5cabdeff9b0da5c922c2721300e1be0", @generic="67c8083c5ca0712858af64e0eafb58c433596c4585035a9c29b975c5ea0975aa0bf9ea2596f9268d038f0dcda446792d8e3c4c3a3f01efb7b9a20ab93b5476933541c5c728f74f70582fabf4a4b7f0cdee37b974b8cfd6c741c2f9d4334d3ecbd917a7fb67da3a3c36790e3c1aff8349deaedc0a1a83bd531ef02b58c4b854a36fcea1b2c70a3e8b5487e1"]}, @generic="fde18605b00cbc80d338ce3a2cfdf1556b21ba3237f224f9c26322f62fad77bee61d3844ffdb5fd498c209d4a71a16e6fdd653f5316ef91aa9dc82f630a8d971b320f9be7869da1f32ed51e7d7c140de7284c3313a73d5b6e4604d6f8424d1513e7b007a056db0c2c982fc721305476e49d3fccb4a18f9cb85716cdfbe6f395842d33ed233b3a2dcddd485a9ef5b21a61080ab016fd6358398c6fc082d982ec1f8cf226f9fed15e6dfcf109e18bd558e680c76d1010b3a8e229126a513e0f1004d99942d0a82", @generic="3d1ff40ad972a966dbe5460f58efbef9a9d447a34d22467595c8b8365ed13fef88933d49b93e9e5cc6337513593f8f6b2f65f8b5b88ba785a0bf91a106281168d879e41025ceefbcb49a96f09ac3c0cdf47d572f89b8d66c5d1a68ebab07f19b727c8ef292b61fac8d216938b3a0af9bab714eb488ff6ea011af25f376a426522d1ccbb2a18efaca52d78e05d58826b87dab40b138125d31a67a138dfae9638274fedd4c752082d1cc6436d6532d1946c28c468cc5eb340ccfde1e385e3c1eb5cea29aee6ab7a1a07425e4c7096a61a2bc5a539248051f199ff4b6f5f8bb3abfc423717a092edbc528d658a2eed7", @nested={0x5b, 0x8b, 0x0, 0x1, [@generic="6908fe282d6b9c3e7106df9e48b9088af5359f32da75a7cf271a4dcf0dcb15ab61e9a0ac81a933be94ddbd4d591b309a2bc2dfc461614cbd2ddab777477bea96053465", @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="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"]}, 0x158c}], 0x2, &(0x7f0000002d40)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r0, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r4}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r5, r0, r6, r0, r7, r8]}}], 0xd8, 0x4040800}, 0x4004000) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) ioctl$F2FS_IOC_RESIZE_FS(r9, 0x4008f510, &(0x7f00000000c0)=0x7) [ 2722.200961] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2722.319196] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2722.326437] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2722.330451] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2722.331943] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2722.332635] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:19:00 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:19:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) [ 2722.362514] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2722.365203] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2722.365845] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2722.366482] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2722.367193] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2722.367792] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2722.368552] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2722.369771] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2722.375965] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:19:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2722.377078] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2722.412804] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2722.424824] blktrace: Concurrent blktraces are not allowed on sr0 [ 2722.430577] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2722.442512] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2722.444366] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2722.454627] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:19:00 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:19:00 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2722.476360] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2722.527236] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2722.528930] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2722.530488] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2722.532478] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:19:00 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:19:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) [ 2722.598831] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2722.601710] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2722.604386] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2722.607395] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:19:00 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2722.609763] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2722.657995] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:19:00 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1f, 0x6}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x1, 0xc9}}}, 0x5) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x39}, @l2cap_cid_signaling={{0x35}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x7f, 0x2}, {0x9}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0xfffb, 0x5}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x9, 0x4}}, @l2cap_conf_req={{0x4, 0x7f, 0x1a}, {0x4, 0x9, [@l2cap_conf_efs={0x6, 0x10, {0x0, 0x0, 0x3ff, 0xffff, 0x400, 0x7fff}}, @l2cap_conf_flushto={0x2, 0x2, 0x9}]}}]}}, 0x3e) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x5, 0x8}, {0x3ff, 0x5, 0x9e, 0x4}}}}, 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x4a, 0xc9, {0x78, 0x1, 0x7f, 0x9, 0x31ad062d}}}}, 0x17) 22:19:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2722.676626] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2722.678199] blktrace: Concurrent blktraces are not allowed on sr0 [ 2722.679666] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2722.680609] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2722.684330] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2722.689844] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2722.692993] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2722.696283] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2722.697143] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2722.839229] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2722.841393] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2722.843854] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2722.844743] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2722.936845] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2722.946162] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2722.947649] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2722.948428] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:19:21 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x6, 0x1}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x2, 0x100}}]}}, 0x18) 22:19:21 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:19:21 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:19:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:19:21 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x0, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:19:21 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:19:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) 22:19:21 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) lseek(r0, 0x6, 0x2) [ 2743.894528] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2743.895910] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2743.897312] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2743.898610] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2743.907591] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2743.911378] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2743.921992] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2743.928414] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:19:21 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x9, 0xc8, 0x7}}}, 0x6) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="03c800e6f5d9900baf6f79c27f92ec49b8f3fb4d2a187e89bc2b7e9bf39657b300b614642ae8e4dc5dfe826e3bf16dd6d41e28a9b30960cb074f6a4c5e11194bd4c0a2a8a5bbfce7ddf3d84ce26ce454b8bc5cfe09ce8430c163d562f8253c7d2bad0bfeb875607ddcd2208ef87b2b887a376e0edc40263b083ee303935f83d071d6d1df8c8733db6a5ea5ce654a579e2bc470486435748f4095622da96f12e6bfb3444da5a2738031727ff14782ad565b2d82a136d3640b28ae0e09d30220b9a0a6523738000ccfc4b7095d8cb787ae71211cce7f9e77bec0dab90f98ad03000000615cbdd2aa0f313b18d89a980ca18659eff8da30e9d2a7b684149f726ad75198b020043ac757a526a2ae6eea236df02b7c3699d694821ef76f3fa4c7649aab0625c417441310a89b394300865bbf33a686461e972fedab2142448c9220746a36e0b1d657d93ef889dbe2982466b417749153d14a4a"], 0xea) [ 2743.942408] bt_err_ratelimited: 3 callbacks suppressed [ 2743.942455] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2743.982073] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2743.985990] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2743.994756] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2743.996510] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2743.998352] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:19:21 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2744.000478] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2744.001813] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2744.006400] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2744.007635] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2744.015899] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2744.022828] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2744.030603] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:19:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c00000000000000000400"/26]}) [ 2744.033925] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2744.050123] blktrace: Concurrent blktraces are not allowed on sr0 [ 2744.057976] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2744.059570] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2744.066718] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2744.068649] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2744.090467] blktrace: Concurrent blktraces are not allowed on sr0 22:19:21 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:19:22 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:19:22 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2744.200173] Bluetooth: hci0: ACL packet for unknown connection handle 200 22:19:22 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2744.206639] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2744.209559] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2744.211192] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:19:22 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0xfffffffffffffffc, 0x0) 22:19:22 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x4, [0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x10000000]}}) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x8440, 0x0) mknodat$loop(r4, &(0x7f0000000140)='./file0\x00', 0x8000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000) [ 2744.286217] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2744.290195] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2744.293754] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2744.296987] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2744.299866] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2744.302573] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2744.314154] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2744.316601] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2744.324378] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2744.325757] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2744.327556] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2744.328869] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2744.329198] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2744.338207] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2744.347718] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2744.349414] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:19:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2744.368662] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2744.374851] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2744.381394] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2744.383010] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2744.463987] blktrace: Concurrent blktraces are not allowed on sr0 [ 2744.531834] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2744.536189] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2744.543576] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2744.545408] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:19:46 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:19:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) 22:19:46 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5424, &(0x7f0000001d00)=""/4096) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x587880, 0x0) r2 = getpid() pidfd_open(r2, 0x0) r3 = pidfd_open(r2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7ff, 0x23, 0xffff, 0x20, 0x1, r2}) 22:19:46 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x0, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:19:46 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:19:46 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:19:46 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, 0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000a80)={@private0}, 0x14) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x8, 0xc2, 0x7, 0x3, 0x3e, 0x0, 0x131, 0x40, 0x235, 0x1, 0x5e3, 0x38, 0x1, 0x8, 0x8, 0x5}, [{0x70000000, 0x2, 0xe9, 0x4, 0x5, 0x7, 0x81, 0x40}, {0x6474e551, 0x8, 0x9, 0x7fff, 0xfffffffffffffff9, 0x3, 0x4, 0x5}], "f3e2359e9d7c7817fb2774d3831d205d84de2d6f97f31df3b558975f2aa31093e18bc1c848fafdaa187ce79e45d8ca76173e00f9e175a88a06a6cc728ed89c693786fb4fba9e9d1bce729d535c6d4afb6d135e3da0747166e1c1509c3de7853d9d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa11) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00'], 0x4) 22:19:46 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2768.425844] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2768.427265] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2768.430243] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2768.431646] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2768.433426] bt_err_ratelimited: 2 callbacks suppressed [ 2768.433469] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2768.434604] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2768.435816] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2768.438160] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2768.439323] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2768.440513] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2768.441956] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2768.444321] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2768.447068] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2768.448677] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:19:46 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2768.451584] Bluetooth: hci3: SCO packet for unknown connection handle 200 22:19:46 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:19:46 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2768.540238] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2768.540359] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2768.540459] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2768.540624] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2768.540952] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:19:46 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2768.541243] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2768.552937] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2768.573243] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2768.621577] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2768.622579] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2768.623575] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2768.623871] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2768.625615] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2768.626697] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2768.690413] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2768.693577] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2768.713196] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2768.733236] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2768.747524] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2768.762802] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2768.768601] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2768.795454] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2768.799416] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2768.808536] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2768.825506] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2768.828498] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:19:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) 22:19:46 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:19:46 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000340)=""/139, 0x8b}], 0x3, 0x80, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xe88, 0x30000) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000080)={{r2}, 0x3, &(0x7f0000000040)=[0x3, 0x800, 0x2], 0x1840000000000000, 0x3, [0x9, 0x19f4, 0x0, 0xfffffffffffffeff]}) [ 2768.832618] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2768.961555] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2768.968980] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2768.970788] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2768.972301] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2769.035946] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:19:46 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0400fff38aa0c92e7f133040d21712ba585911568f7b9e50f79388c4cd89d573fa57ccbf9822976837ec733a427ec2a4c07b14dded8c42b3cb49"], 0x4) 22:19:46 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:19:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) 22:19:46 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2769.071041] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2769.124951] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2769.126216] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:19:46 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2769.165477] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2769.169885] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2769.171183] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2769.173858] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2769.175163] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2769.183585] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2769.185861] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2769.189539] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:19:47 executing program 4: ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @local, @mcast1, 0x61, 0x4, 0x1, 0x900, 0xfffffffffffffffb, 0x2890010}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04011100"], 0x4) 22:19:47 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2769.309420] blktrace: Concurrent blktraces are not allowed on sr0 [ 2769.454525] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2769.463980] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2769.490367] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2769.494505] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2769.545503] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2769.547990] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2769.551615] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2769.554574] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:20:11 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:20:11 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:20:11 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:20:12 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:20:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="4c000000000000000004000000"]}) 22:20:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:20:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000000)=0xfffffd78) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xffffffffffffffaa) 22:20:12 executing program 6: openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x40000003, 0x2000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x4, 0x3, 0x6}) [ 2794.214935] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2794.216225] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2794.217606] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2794.218915] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2794.221028] bt_err_ratelimited: 8 callbacks suppressed [ 2794.221962] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2794.222362] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2794.243625] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2794.245909] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2794.249132] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2794.250376] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2794.251845] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2794.273676] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2794.276197] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2794.278947] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2794.281877] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2794.283348] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2794.284792] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2794.286486] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2794.291210] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2794.293626] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2794.294840] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2794.308052] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2794.309541] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2794.310735] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2794.312456] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:20:12 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2794.318299] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2794.493143] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2794.496521] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2794.502571] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2794.504364] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2794.515424] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:20:36 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:20:36 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:20:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9505b000600052b94ae8e0020b01c6a97130dcbab6f3b9bc482d3a54bb99302367f03444220a1e3517005a02071ae5bc8e8e2e1e3fa8d094273dc2b2d21644d3d672bb05e50b8847965b669a7cd77ffc92ace08d4ab0218b2ac9c94f9606c5e8aeabb7b762c8673"], 0xf) 22:20:36 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0xf, 0x0, &(0x7f0000000440)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0xf, 0x0, &(0x7f0000000440)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001f80)={0x0, @local, @multicast1}, &(0x7f0000001fc0)=0xc) sendmmsg(r2, &(0x7f0000007ac0)=[{{&(0x7f0000000840)=@rc={0x1f, @any, 0x9}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="748a101ba607f230ff299f25dad6a0d13afd766f2eadcf25834ab8333ca25ea8379988c0155f371c9ff004b9b16382bf0e273464c1b0d2616659249e33c0850b9e6032f3bb7e7991156f89822a13dc086b15b510c9b5706ab236fd65983e25240576fb16fb8f2842dfd43f8b072689444a7843e77985fa5322b6", 0x7a}, {&(0x7f0000000940)="af4ab87bedff4c5288ac5a12c4de899cc50174b8d42f3c483e3ee7c5a8b08b6a225ed8d947653f0822b2f4d7b92e9db416d0c5eca080dc44d302350d70e71c665635213d3d27437bd61fd5a1ef7a1862b1846cc7a4b148425468da1c007b57779bc63a9fe7886f47875e2c9679e8fdd6cc659a66da2a", 0x76}, {&(0x7f00000009c0)="55d3e394e19d1c775b3947a82aefd844f39f5fabf4497c4225638bcb7b904878e72efdbbf6c700b8620db808f84dbad3da1db1f8d7943d317095c4bfcf48323b8dd13e675364c244ee96ae52f6c098a721cfaf6f652d7a9ba5b09e4eb773b3cb04225b6f4f8b6e087baa4ac26234ce272e89d5d927ce4cc9056eeb23b87140b0098bc70b0a37bbd6acd83609cfa2fea7de08f23e12e49edbb9c5c94c36cd0bfda67a6b60f7a56b9979443872421d8b133503a3c91a5ba42e3a282b84e0b9cc8ab809efd99fa8b199f786cff4c9ea609a3042dc024778cb62b5b47be947a824056c2a62", 0xe3}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b00)="e50ed6d80e1488c251d21adef2b00c64d928d00c62cd53ddbc21d42e8060509f28b1900368fbb5719e427c10fdc1194c8204", 0x32}], 0x1, &(0x7f0000000b80)=[{0xe8, 0x10e, 0x1, "d60673d7fd338406a76a1aa4ced81e18f9a74f77cecb0452b1c05c295842028ab6ea9082f7a51a8d02393b38d0174ff4f1d59ccc482fbea701adc2798e603a161a3baf695e7aa6fb034cfa942a610ed9b5a8c03291e29d4db1d48e0c6470aa713c0873e4cdd078cda97ccbc4bc9a3d95bb006b6d9153d109456116dc45a524e65726fb40f24b848fbceaf4e321b847a2e45aed830bd3fb7ee839a12eb29ac952409e279bdc48f5cc98de2e65a6ce3bdd42ff13db426f5aee53f86734bd27151b30a17a359930d0607eee400d68b5d4c4ed06"}, {0x10, 0x111, 0x3ff}, {0x1010, 0x101, 0x9, "2a97eabe894450253c40a88ed5d66b30c3e2865ee36732e25689aa473b2570eb0a7094241d81057b9a7bb8bb19519c5e23a7e5711c699f59b7e130bebe562930e82ba959ff25a79df0911461b4dbfbed71961bd9544873893b9a008ba48c225e06ada20cf6d1859da1e6b63fb1d662d4f8bf43c195e2c41c92bea00eec64bdbbfea9ab224995e13f36fbd8bc17095e490b10d02f860088d4440df62c063874a0b8b5c64457e14bd585a5de6ef3bd4fa7ea2c3980512a33f2eca6bc225133018554c161707a7c9f383d645798db8c528093a3e965217c7b14144bcfb5daea4e63e0910b4bd298e0dbe47cd8474196d64bccdfe5e678012e18fd5f4931d7334c4f9e16855d02b43b79b46b8cf93463e81eb104379270223bd7f4300993ee7007ad0cc629fe29461ce65e40d0526c41919a4d8d3b84f66db53760a85290c92dd95fb0f6c2c463cd750433dfb13c218ba907ec09ffd7da607546c5a22117caaf916c8cb3132cd61561bf0b405a50dcbaf5a3781268728c04a35ca414bdb47336dd093f1264119ab3fabdc4e2356fdaf0b66e7b5ad204644c1f982ac67ed062319760834749a147d6f47aaae0da3f5bc4df764e7b2f55a491f76511340f3ce999b952f3e4c164e26004e99aadd84e05ef80b359e2cec6e125eddb40b14824695359fbfd5f67a5ff5e1236147fb96009abf494c4f76d50f1f77f3801dfbdca92c5269335c0c2069ec0a41373ebe35505d3b13589404537f8cb067b17db066842293080fcdf69dd61ab007dd7070c4c03495e5aa673fae7263f614c88d8756a823da110888e9ba33aca32a33e74f471a8152827cab25447c4b3555cb072478b6b354dd49fd6c7891b2b85b2876e30f7ee35e0544e1311f69308f8b849b68895754ca5ff140c3686f391803dd75ccfd705109400b12483817a390cb29ef4a1f3c603209e9925b4d2290ce910293e2732ab5d1f08f69e209ee9ba5f3014ab6c7fcb7d22e624f18725262a2f994bc874c0124b6eb21237a65647a67c96a83abcc5b2c2aa7f5c0505185bc36524d7186e602dc79d650ccd8eeea6883356440bacc0987d4cac4a8a3cc5323ccc04dedf4eb088e16d10bf6f411431d2b290ba300e3488065805f6eab0c0b4970344e06e74e1f594aac423e6458a5adcbf14c9a7bde63752ac3febb1bfcd80071a45c9601fb60159886ef06d7413a568e32f0388a6cba4f565c73d500f56fbff2c09c73d6c7bef5354fed9d66938ab57037ae291011f68f5e2ed1b78113b3cb0ef57f81a08f4d707e6f28d50912df4a9c9e0e62aed9905df7044f773e8e74ef03d40925030c27e6f0b0da899fc8e339e53aeb24b56f1e23cc9acbb09caf7b44a7a6b706efb4839c1219bf98c63142aca86d3ad097ce8f6ef55adc57648410a41634079dda996b5693126da2f096a647b5b8feb55e9d091c52720ac566fd5c59a02de371e4a078478f49a2879e0e05729a2dd39ed1b384a413460f580d3237535bc4c3e937e132309bab2e8c4b092e5a27344f62993dd354f90a7238b8b45e96d13d4948307c6922be671375902b1c5ff3f1c25862bb27c27ecbd2eb27412d4497c571be6ddab9e562aee0782880822027b44e5cda5aea420d451de42b3cae3acd5da82efdd0569c74f8960155f387a9dfd772f6d848b3179176e8128f4cbf8264c0855da9b95af2e063bf64bbaad9aa34ceeb3d9dc9cf8cc44aae36f2218b9b950da1ce3434427c29118bfcd005effad02c322f8047094dfc135a72f1357a5ab075e307de181f88bf006d248f7c27a17f402351ad0709ad608ca4b8e0233764d8c85ce1288942db1cd1ebfcdf4589025cb1789a49d1685a75e188baf9f070a86c2eea5adad2e84b8f347979cd61ac9f1cb6486fa5831d6ce8816b8eddc0c554bc64b5d6489c1a4d3b59c75b17932cd1dc357df4043a044ded830fc731e34ed92041efb7437b394e937ac2d70c7a5e586da3687291a65b2f75b20d9b8423ca026475bb359af9b424ee4f83723cd0ea7a3c19e8140d5155716073b3a20e3e03f95e3c6d84f2485e4bae707dbf53c9934dc564f90fba6408a14f6448b06a2b6adc7ad132b1f55cbf04cca1d804da8ce6fbc34336b1e03ab3a09afac90d1083c0fef04fbdd2aeddb787bd24f85395d07006f8bee881e17e76069d0e779bb3045b3b857865265dc4fe0a5e3b063471c36d1cafb3fd024046bd1f75d88288ac4a9a20a913b8684ecd7d7a64257a5efc3cad1915a70f82295a41dd966b8bde0dde05c2d32454130900d9a07f46246c2574188b1dab1a146351b86ccf462f3e4873fcdd0fbfb752a48c718397900aadc54755e90703d0b17ad82f4c94a2d2c00933cdaa2d218c9053d3e6e6caa44e5894b28de146a3d854736e5ebd2f60783c368b77bba785522890768403d873e943dd2a9df7fb1094d0401a0add17716ba500710e3b03371356da64596b403fec7130fc4b9280c92e1d0cef9ebc59da86034178b7a4497b62349236c72899210c2f00983da0c67346962b61e558fe953787905552e4d77e0c924b3c61567a4c7333468cae9ffa60a602e02d51b2450c7208560d6ef22a4182213692b2e630f1d5628e9c457a5cdb3348af581b699dcea87b8466975d8f08aedd9a38e300ee03801b5a258f8512f675f12a12ae3a3d240f149f5ce8e1436a9c42adb62cc53eab32fe83d176498e7849f1340cd6f775104b049e45efc207e16ebb945313be810e2c9031b5d2ea60659132137130cf7836331c296a173a45fc8a20e08dab8a06f6cb9fdf536d43f11589665294c47196e84b2b372c03be49dad7d85b8968ae47da48682f5ed97bde7ba9b50d3583cf2d5dcb70950afea0084c0eb916c1048d0bdd5cc2e43bf2f3be319f7f95e7a837ac5cd31a6d04919bdd240838de89bd83c97c548b4133a31859d07db6f653eda0bab30ced5eb15929613d129b6faf321e642d014c854cf932356103726bfa335dd0fa0ee5e64f8b35ba1abde21666dfc89e86223e4c047d801c778a804c104f700f55af331fa55114fd882cd3c6181d0c65336880d7fc7988a5407cdc995ac592adc123ef391df22f5d46d098cea1874b1cff7f47313b5f056917638805e630ba1a0cdc2a6e4788a61eb488aa32fd11b015ac92589031f524e56000ed72a8fa7ad026251413cc206cf3a8782df2d4285c01919600629d050ab21a9c42a08ac5fd412aaa519bfd08f69d6b0c0d88e42c4e737ba6602322ec3553e0907217657e33fd8419835e5bf79a79105a3fe619fb80bb85a0b034fb0c8cbc62044852e956c5052521550c5f6eb64f7d37582b4fcf3de097244dd9aa43d9f28f5a2f7b0e6b8bf8fa3052c54ce142bda79595a93322dc8eed291f8e23f041a900a0d9440bcfde6dc60dc293aef954fe1909d5ccbd66b9cc7288f5bfce355b85939b0d0117da6208e74bbe8e46fea3ca3761b37f4c3106948323b27b8e885efa809f8ff0ea0b2519b56b03add898ee0e17e50db0e8e71ebd9a18265ffdcc9bac94b5b2bce1375ed414b131b57923488f71a2aea3af6e39160314a8e59a15aed54d99ac3ac9cb9d6c5ca62456526f1cec10c620a5c439570b7dbaec176ee7796c3e9d2f7ec9b39474a687dfca3a6d3221de11810fc2ff853ac923e8e6bbafe8bff286bcd4aa9b8278f6b0e7dc38a94667844a6fc1cb97aeaf5d9d50b3e5cb4d21f922349daf1eec8bac07c948c85a5c25f13860f08f9b676955bd148eb840af844d173b8d516acf39620796141fcfdd75b1397f62f19f895ab2515f0636b743257bdff029ba6e216cc95fe7b718f79698a83efabc33363e8f1a23c10b77792404cda9ddadb2aa11f0a36919f1f6b44269b872a5f6c0b299ab3bf3b7082b58a55598a8311df068e6646cdd37dbb102ba23c9687bdac9fdac823c95993e2ef1c8890c5e3c0969421bfa49f25dc6e7b962f5a5d6684dc214e89ceb93e76fa557c8245f98dc06d67e5353d7982923a014f63de4d8d01c9079c931170f1811cf6f529232cb8429fa3dcfab6fdd37b50718939128207980fcf69d240f071384d1336b60f3d6eaea97b8e8c959bf294dccdc68b82e06ab28b9fd8258320c3aec350dae4cb6734fd67ec388fb72d90b707642b9bfde7d0d4588e21654da123c8120ac7c3f79f99c68b9c694be8c175dbe64ed06c05cd40b4fe8e84ec8810739820af2ea25e2c7a9f917cf2f28bf6ce91decca36dbaa635300d09f290f29b2e74df2486d431a91b6a1b6af106fb90e9756017056ce5f6e74fe84ba3558fd529cf6111c885dbed66993a52bf683ddfb13d02cc2cc0ffabfdd884a6fd69f2dfc6dec5f46b3f38535c74258e72e9df7ef41b0088365e0195d59c4ede53bfd7c0df816f04bb18ae39795c143ef5dedf258b4913507eed444e16f33982353d2c018b2d1cab5fdd12ac45b434c9a62f9da335d75e3ee2f7c37148cbf13eeb4567435c69835363897455d7564ec5e7238e011d67559773f8c5e478312d5f40e521f6bbfc7106ef2bc468b51b7d11b6b0d05b1ee753a77140089d9cb57f05875f24bdcdb3379b21f0fe29161ba5ed573ead04a5ff1dc5718eb5e53c839848f2874e5d3fba15e8c4e73f2e5f0b46b9fc89b06bfd7070dcfbe2e8c99f4b8313009d2b10804de0d44a5d2ae5f882f5cb616feb8e519a5fdb7a5208ca982acc9e3bb10a7aef69b5950d799a9c85d80225c608a0837fe64a091a07c663b2c97f4f2926a91aef77d18ade8fe984a7b4a3dc459a8cab3e9b919ba6f8af35f626fbee0718a738b86d3830d80eb2270ead875a42d9dc52ddf9a8b3daba3b793121d5825274e9db1a2f2cdbc127f15132b532d67429bfe9d6976bd2b642d70257a15eeb59f9938082395d4ac096247e2618d40959f6e2f5710c6efb3f02adcb01c4ebe7e4f6a142936cfb8a5d807e774c45310d921cfa1752a981fd26a4d069dca2ba7e13db5e70b36950f8aa3df5eae2a36fd1d7a9b5df15461f4184c2cf0f02b799681f492ad4340f7b37a0f381818f2be8ed5fe85fa1eb679cb1404f2b6a99f61179b7ea805e2771498d7dd97f826a2aa7bf91c7a7d90bce355803c81fd0cc92e1f5b5b9a3cff75e0ad1de4cb0e1cdcd34705524b693904f8ed7f7c385d0d38f004632d570b57b9fac592081e516cf3179ba5744f85975bb3a64f0d7bab0ff925485c434b8a330a3ed14f2130d98ed56b0486c32f3def61ab86339c2bdc6ed809486954bea9e6b459b26eb657c505e6bdf53c9381e1ec99689dc3705e53a715f9a094786f86e228eb7cdd952aef37f358e9117819ad619f1abdd8121f2c6423d841d53fa605781d5fde4879bf9a7c02b67a1a1a1dc7cd80800c3f06f216e1b1002b0b6f99f71dc864d0e6d482b842a80c94f18efa549bb87b6ec77a8911e360f316f4d83a62c552303bda13f7942853fe468b865ef265e4536ba1b32bebb0602729947df25e79421b7fa4042f67fdb124cde7e6624a13f683a06b3c615502d51e0340e813537e07023d83421a97e53c95a62b61d63c14fda7a26ac284c7e419bcfb46c62bee8c32b5148dd8b733f8902b81b8d64b8388a7aac081bb976bf616ca5d96e164de255c8a596f22346647b905dd92022f72939fce0411f9a9b7376595ae76c7170d78c01c661ebea2cf4e8f9badde323d8d568cb42928714cbdf1555b8e106005cb50645cd6c057272257b7514f84612e436eeeca8b4275e9d50481e16c09a34225eb53553c15a14ee4886f0195ca698ee117d4a828c111b142c491668ad46b93139b5b612146df61fdd63671dc38c479af9"}, {0x50, 0xff, 0x1, "bdf74317d6a38fae3de1f8111da15f76d44a43fcbf3a2eb3623cbd1052f936757a6b28a93a59b0bb9fdbfa3447a47b163f401d6d23219f7c226428608b427564"}, {0x40, 0x102, 0x800, "abb7a8e85a617c133ccab6f9845411fd5b40d26af86ed43134b096944b8b55cb9b448c96ddfbfd25a9dd31"}, {0xc0, 0x116, 0x1ff, "90d772c8e65601c304b06aa4ef14b12b65cbe693c666b739a59a2b873c7e7f129bc7097956df35a694acb836c59d2513f9de53d0bea9072ec33860a50ffbaa4431b14f7c89139319a3affcbc2872e0f9b952ebf43e118ac63f4f60a821fa61e39e0711a035185bdebf0e9462d7a77f2ee1904a2b609493365fbc611be88470bded9e1bcfd4bba9c45a1969814ce15e991f93aeac90722e501a7f38b162268a43e36e9bc17bc2cf85e8957c7affc493"}, {0xa0, 0x115, 0x6, "527eb4ac868cc3c49a7844a239c4a4a2a2118159cdfa773c5edad06954832bbee6b1ba1b82a140a1fbd0eb6ef3c496077c37521f4976d4f9d27418d19bff516a1bc8966dcaeb7c335d894e55bcd3be03f647e34edd8dad1352274c430d02291083f20574a48014ea4d8e12e40f4443ade4232e3f570ce4cbd45184265ffaee1c540e24db9e0c3b60db341b"}, {0x100, 0x112, 0x9, "1ccd3b5aeb4b5dcb322eb4162556170fde516990deedbba0fc75f233375963fedd85bc746fdce2c89f6fa99f23e91bb9ae808a969690f8cd9a06a98437d730e1cb82a1248d087788e20762ab6288980d7c93bb7e48e3ff51cc433f620629cbbfcd2332f5ebe54307d3ea9915de93e3ad0b4d8c06a8acf37c140ea369b6e6d16f12d45ebd714f66cb9b364df887513f5010114ddfed890e4a4c95486046278e66c69e00dc29834daab0d5e801b3accd8b71200f52832fb8ac9534990f97ded5ade859a054fc0670bae5334a466cac26612ac52a9e84c0b33b0d2dd4c72cda60d5209450b40487963820"}], 0x13f8}}, {{&(0x7f0000002000)=@xdp={0x2c, 0xd, r3, 0x1e}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002080)="9398ada4ad23d1a15e8e37df1ebb156bc93b431c5023a55472daa1101eba74d8e211794cc5eec5bc176e341c61d5e98740cca85fdd665439fffb5d3f092a47d2db25fd33f0a0171b0ba186b65e678bfa780636e5a67387f48a180b929f0a27232ca26c2a449621fe9ee592f92d77b63b63dbedddd732084186b274ca05859f6b412d00737a8d450a0f90f650b67ad4339de930a4fc8c7efb3c9b66158111a84e19aaaa0c9c9da4451d2f996a657cb37161e63e120533ebd6d030218718c343646271acf418999e40", 0xc8}, {&(0x7f0000007dc0)="d65bc8c57921d96623046fed143767cb148681475d0216c28f20a0727b5bcf28bfd640d7d89d8325118c943c81cf031ee251f64d6fed53cf8f6f8c62d48dd0b30b66736b0c5641abffcbfa67dea4889fbad1242fbaebdd2691ab6208b599b58786344dfacbe5c7dc4d9d491424b6058a882a86b188947c2d8493f8dca9d5297085f3fb2e31efa8", 0x87}], 0x2}}, {{&(0x7f0000002280)=@nl=@kern={0x10, 0x0, 0x0, 0x20000}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="e019a966adb49266426962acc3d37447b46f7fa3f874d58eb9b18015d383ec9de9799abdfc209adcb7107f1d5c7291bcd1dce75cda7bfea041e860476a926e1620b5814ee2b9e400ce9c1f8226abd0da193001df5e183361fa6b12bcf5a43e41355859961655c9a81db971303149d34a8131b779af10d8c973ca5de642a97c1044a2724eaa0fca8c8ed2d1fbf0dd5882c20d8697f881d1ac9fe7dc61f99b0f0deda2a8b7ce64f96f4ef1", 0xaa}, {&(0x7f00000033c0)="4592371c06611c1d08b982e374136c0abcb3dc45aced1f8b47fe6f93fcdf7312dc4735f41cfff94046d9839d558ae6f2922ea881dd4a19c9c3a619fe75c289b95e18324626a2dc3f3d497f29922d7f37b98e19c4643372ddd0feb6714c6aeeebd9d8f01ca6dcd1f221f14f31b5666caa1c3e6d8a7ac4e218eb056f26b9160ffa347bcf1c932b11f753ee7a6a66fa5ab4fbb226e624f6402f557ead42a572b8899549e69363703e7e4963d0489a27c2847b860cfc6a1fbdea3a793793f2fee8f484d7c005eeb4fef0a00612fa9986a2dd80667e773a26705710a19d88ba7bf9ffdaeaf5afb80a4e06b1564857565bf5", 0xef}], 0x3}}, {{&(0x7f0000003500)=@nfc_llcp={0x27, 0x0, 0x0, 0x4, 0x6, 0x9d, "ba7ef3640c4400623034a41a1451f6341ff2a3fbdeb956a617a6c110938555776509e370b74208c0eef0914a077b2b2c976bb38fc8b8faf9cbdf43cd63c657", 0x3d}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003580)="5fa32a84328739f22a578f9627585c4ef0b0d69ac683cb0d7688357c52c8d4857dca0bff308c6c20f6b16516e76c5664a22b4c052760e1da5b360e54ca5d8edae5428028e0bc0f42c1289d2f97c0c61c67da930fc8ba3f2a003dca1df310afa63aab47ea96f8c33b7b7b0e1731c0c832e91307d26ce021c13aa0acb11f8a7dbe2379b6e2156f3c375a5f9600ec55b1e386e902e68b6ef00bab3006ed07eab224e576d881a0240b89b97c2f8fb672fac0a13500013c6d1a1ebe81959fd6ec6d5ce73e5f150936ef3cafaadebb54d82ba3fe020057fb73456394164a89c82132a678930b8463adf927166907b0c4d96c8dd76dab01163a39", 0xf7}, {&(0x7f0000003680)="46971df36819d0cee1530beaf869a199626124bdf1376b730f3541e6637f9f18761bde26c8ef4ad023e9760db9c02a758276c32c4c71db08b0fd915e34edfd41cb2eda8d8555da65b405643f932701fd124e9114ddb86d12c2b7e2", 0x5b}], 0x2, &(0x7f0000003740)=[{0x90, 0x29, 0xaa, "e8a1aa5cd1dc0fbd3fe45fe15ca117f106d4664eb53f5e2603372feeecff230107e7b03d5466b1a3040e04e7241ed46addc795235c509fc5566a03f388f8a18c7bd554846e1c6f84366bbbfabf0c395dfd273007f3d83a19c92faa8db2a01ef585142d200d7380863fdcff67f56de13d9570b56776d51b35ccf676b35e7a"}, {0x68, 0x114, 0x7, "3b1e6a8afcd3885fb4d235757746074649890f90d2e305dadaffa1618496dc695c5d213649b48e44f9c668ebceaedd62c354f295517fc5066960d8077a7dd1cdc2f5cc8affdd567960db169c30e2b88a36"}, {0x1010, 0x10d, 0x3ff, "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"}], 0xfffffffffffffddd}}, {{&(0x7f0000004880)=@caif, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004900)="a8518b8f2914d7ce18dfe5e65626dc6a673a060eee96a67379069c506cbd3d1f56900007514610ff64cb0c28771bad73e6f3", 0x32}, {&(0x7f0000004940)="1c632b9ab3ef619c8f", 0x9}, {&(0x7f0000004980)="e15f462648482ef95649d4a8e6fcdd70af3dffab8d93e9138ca1735bd40c673e02f4eb83404d1e5b1c725891cca6b8020c7940b5051b4899dfdf9de969e58a8e1cfd034b5c", 0x45}, {&(0x7f0000004a00)="af1248b5a5c22602eae9f3a8f1b37017507e451238c93508a940412c1c4551447b2b8760310472796bff5e22997a7d5c1a83b8fe307b9d81a1ba8326191464a5372d5f0af2283931609bc570ef2aaa", 0x4f}, {&(0x7f0000004a80)="9bc0c1e3aa09c30396429f0a7744ae53cdd9f60ad28224d113d0d0e25122e7432f533f66b2d82526b973f4d4537ebb2ffede1df93f1b72e4a6b471e9ed6d21a31cdc9e086867d69aaff9b4da86ee618d7bd39a290500a6d3b765f77a7c925f67bb435eed799c3899cd2a231a3e913e0192d88bfb7c8160f166ff0a58cd5484cba1218a", 0x83}], 0x5, &(0x7f0000004bc0)=[{0x60, 0x84, 0xb3, "47655484422c3e9cc1ee042e0063db4b0260390b17bf905a50b6357ea69c2576bcca3ba925309f34f134d3b613d7449effab73e81e20dbdc5d5c79988fab3a01c8140d4affd677ab07"}, {0x98, 0x10e, 0x3, "1659d69f728fa9ae13057dab486f94b3101dfed78fd70995bcfe21e8545eeaeb9dcc73e4bb3c562a589685fc7b1ff0adfc1c9a4aa7b19d35cf83344f4246a9e0aa08701f8858b0a56de5c757cc025e9256703ad73f90a3b957542b4745d96d20f59bedb2556820ed1c4aaa2884d46806732e8d61ca11fb973ab5158e4200bd1b565a15e384a8f4"}, {0xc0, 0x88, 0x80000001, "1f1d27ce1f573bccff49eebda4cd0cf01b7ad6d970ac396b21c7fef42662f142c2fb8a22df4b4fb46ebe8667bbe4854a7e85adc052cf3b29dbf6f876472d9993c8adbd7b51e86e0739b4f3ac0f1d096b57e77d1f2e2a00e7802b9adc1b23261dcb686f466f053902070f0d30530f3eea5ab8f8258fa14e30250cc125f6948f9a8ba48dd8428df2a267142efa22d00e204a3338b85844ce47d78e1784edd686c01cd66ead6e7ad7db97344454f856"}, {0x90, 0x10d, 0x7f, "47b8234ca96693b903d60cc0f09dc58747a0e03411f461f153f549f085b4363a6e139f8191605ea28012daa7a0e56bea687e72ca76c4cf01d48940468e83ef854dd34040276ee5b367fa16c3095bbd4cbb9bf5e36ca22214f27b4cdb873aab1c432dd916b2b2a48c64c44691505647bfd0665cfcfda13c77d6111040d8ca8709"}, {0xc8, 0x107, 0xffffffff, "37f66c3ae372137fc666beecc7fc0d8fea01e0c5b06f2d700e6f6b623f4a74b3f5a1090aeac3c84ff78b017acdb3f9d2073a4c4f7462b4953c7d861ba6fc548f05297c286dfb310d5420f4db5bc257e92a181824df69a34800ae553b680c6e6c1c13e5d6398a6d0bf6629c7a32e745fe2611dc6049529ff72db409ce9b72dfba443b250174cecf7c2249d82262b1e9113e9be6341bfbb1fd33e88438fbe9b247126e08942559b06bf5751b9af9aa6b702d9c"}, {0x1010, 0x111, 0x1, "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"}, {0x88, 0x0, 0x4, "6d1290a385fbb35a11ce2f3d683bb372338b12d202adbfd5b421954fa2f058148580f7ceb2dff032c61e9f0563426e6ae7027054b27baa11050958e3a5da5cadbf981af1f167c0319824d08e7919bb2538ac26fd983f9e85978acd5b178cb419331943f92420040cf173b86135107eebfef041d582"}, {0x1010, 0x11, 0xc1c, "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"}], 0x23b8}}, {{&(0x7f0000006f80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x2, 0x2, 0x1}}, 0x80, &(0x7f0000007380)=[{&(0x7f0000007000)="ea08", 0x2}, {&(0x7f0000007040)="82b68f2a4c9283ef06cddb757bf2bb7465da5e8979c4b154cd42e39faf1b00cc924a3cbd97b02bee5d7ec83ba17df7d78cb5ffe28189701f1c635ad3f67de909", 0x40}, {&(0x7f0000007080)="a1bf43e335ee12c292382c1e2b5fd7464d6e9476f9cd79dd39c1ed79c64ac98cfcc43f1655ce1b7a71", 0x29}, {&(0x7f00000070c0)="4f459bede6b4de0d2aacf36e2835366113a9eb85827e1aa05f6c28d091fe4ac0b5e26e4af1abd329f72b70e31fadd522b57fbade91439242a280d54a04796caef30b5c61fa6ed41cfeb53f344a71554ee4f066514649bcaa3e29b04d18ec01e30f6c495e65ccde57b29d14b1af2217d46e9c9d5af717ed8254d0c9c1e41422bf493ef5d54cc16a588f51a8b7f1a577d888bb21bfd62963f883b57da2c298019483540b5688140e33f1221fa3f447b2a9be8c77426e64a0844c040abc1017fc9b75", 0xc1}, {&(0x7f00000071c0)="cbad7b012b136b44fe", 0x9}, {&(0x7f0000007200)="6cc7e33aad8c", 0x6}, {&(0x7f0000007240)="9f197cb40720586cc8c5275932deee3d2110aa84e275b948caab4121a39307f0936b", 0x22}, {&(0x7f0000007280)="d54d27b52d502d56a2b225648fd0a4f11712b4c639f7243c68490c09c5bddd32384ec677efc153c454a24990d97a6788ecfe7d984b375b8b4cbfc30a72cd6639107755772015a014c148dfe84e3255f8134ec370ed3038daec843809838fe6a06ce58220fdf7255c54febf5ecd942dbf2790da7f26f4c31bd11312d5fda1e4725a247f395ac1dcf5179bd93dd0c6fe8fac7b8dac9b6250f357da102f0378b0dd4ef2efda321e95590d615c177d69414c81ef1464567bbc86228bca5fcdb95de2c985db2e54ba064e32de3c0e631354d7e78580e0b85e420aabdb94ac74de96076d23f793fb84fe57a9ab0ee4a20384e8ab60db23", 0xf4}], 0x8, &(0x7f0000007400)=[{0x30, 0x1, 0x7f, "222835bae655e8d432760ab71df4a1e072f2eae7dd819010a32cca7122e9"}, {0x50, 0x125, 0x10001, "96a1918096a889915b536bb393a7175e55df98a6f001458c3ce8ab8f54b2d6c21e031cd9df2b1617fb63bf3a32b963935f5dd3e417e717312c78abc51c0180"}, {0xf8, 0x0, 0x8, "2e5e937880dd7348c9189f9744c83f82b91c4eb99410a33918eb046f37b91baf87d53f6b3da086ea0e95d02410569050634eea062b32e2552b786752034c8b0c6595564330905c5ec2bb489addd428de117ddb75b7372279884cd1f3d187ae05cf4828769631c476b50420ac633b2d3d6466840ee0f6de1853d1ae614f2d618b87649b867c2eb4e67ae005821ea7f014adf1ccd81f5d77966597995b6aa1ecdfee8722b4b86a65f17cbd9763dfada37be82b53f52955b682a573a73c5ece277fec18a0d4b3890a05befac35f85e5aba105d74e294df0e10996013c39f8f2d9f845ea9f65a1da8b"}], 0x178}}, {{0x0, 0x0, &(0x7f0000007580)=[{&(0x7f0000007d00)="c38804b5fa61fbc7775c06854a73d8a96d222fe1f4fa3ec6cac29d7aa5f22faba54f794d3c91c3a73cd4bcec53e391831d393f2682dbbc5bde87ad904b98313fbdcecb47afcc71ffe61a3674af38cfd0028820132186ae7960fce197e27c17680af98492dfe7bb4ab123982e4b5726275efb15e311586970fca2f6a262d4765ae0e8d995e35ca44a3d58", 0x8a}], 0x1}}, {{&(0x7f00000075c0)=@llc={0x1a, 0x309, 0x8, 0x0, 0x2, 0x6}, 0x80, &(0x7f0000007a00)=[{&(0x7f0000007640)="e24643446295e77f76fd76bf8025a3ec5608d2b1501f565e31e987c34fb800c6b817a269e1ddcd52b90110731a466fbda8496013df4aee57ecad53e04c50d5bc50c3aa58a193557dd40b0f825286d719aef0aa2680f5ef369936707c3b6541e98eaac57fcbced7d4f224dd5fd805f87787746b31b51443d200cfd01037e92bbcc3ab44def4c8b11d7691920b623666270ee906bece0bd4965efb8bcb506be5cc39a6b050f3435e0a39394a1d4fbec8433f735a185a7f33c11820e9b207a4ca51e86cb3c98371004b34", 0xc9}, {&(0x7f0000007740)="f532e5792e7bf0a8272b4ded136c120a3e50e79122cd245002fd079306824d7eda570ef40ba2f4a7703c299a41e3d9f0e8cf2fbcd4c763848f9db1fa3faa5f990faf90ed5373a297b016298f97d45255572616a532e344bb5cdf730935f3088be0", 0x61}, {&(0x7f00000077c0)="dccf1205291c0f87b64d616e47ff5e57d4da75d9bea566efd77b1bfa60c291d26fbcabd9b7340bd55b4753", 0x2b}, {&(0x7f0000007800)="1e1ce1ed726342ceaf84463d70896840d579a2aa5a4c550a3a1475790eebf5a92909ce17c4ce7fa01a6e05e325fc899f3b2f084eb8a9744b0ce1add2f054c6aad044fc36c7183baa818ccd81751417225fb754e8ac80991bb9f43bfdb0ff226f6b2c7f6db1be7ede8d13b7f6383d84b6051a7e49f73a2e1ff77d79e8742642fab404201f909e9af4046d4a8a0277a1d8ab52330fad13d725b1c0fd6c73c93b71baeda1af1dddd2c43153eff7667e64900c8d8afc47509c2f71648349b01d93d30e16d3fe15a86eff3f767f79dee85794600e970bdb8aa5fc4415e3c1e377bc52a4297c5775de0cda6e54f6e01ab8f0574cbf", 0xf2}, {&(0x7f0000007900)}, {&(0x7f0000007940)="a2d1b8cffa49f3a58c7319b3000d6e9fb482d3d107d4ff3edf7424b49fc282982de06ece00c04169068d9145143c2a235df31685ed29326566d2522e2aa4196df7061c58c3724d5f5b8cf2b3a7593cc9c9e0ecbd5542db9ec47f34a65d480d2be11ac33efeb179590bee611968774e70f0ac19195d88051be7f2a1ea9e66d3c1b08ee388076f26af72c9c6c227ec03e03c6d0f0cf3d75ca822c3ed27dd", 0x9d}], 0x6, &(0x7f0000007a80)}}], 0x9, 0x24000000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000800)={0x0, 0x2, 0x4, 0x5}) r4 = mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xb4) r5 = syz_open_dev$sg(&(0x7f0000000180), 0x401, 0x200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0xf, 0x0, &(0x7f0000000440)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000002180)={r3, 0x1, 0x6, @remote}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x170, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000780)={@fda={0x66646185, 0xa, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1001, 0x3}, @flat=@weak_handle={0x77682a85, 0x100b, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x0, 0x1, 0x22}, @fd, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}, 0x1000}, @free_buffer={0x40086303, r4}, @decrefs={0x40046307, 0x3}, @request_death, @acquire, @dead_binder_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x2, 0x0, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/53, 0x35, 0x1, 0x32}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x1000}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB='\a\x00\x00@\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="000000000000000000000000856164660000000000000000000000000000000000000200000000000000852a62730100"/66], &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}], 0xa1, 0x0, &(0x7f00000005c0)="152715c0e8744bee6b6d7718d6958f90c69fef6426992e3cc88f9193cf8810be6812955e632cec7ce9e1b7fed0b5df0a65193bb93a34263d2092c4d47aaaab70b40b2ff29101054698397617e1ca00a00a5625395f71590efe3db73fdf70f2ae86b9a2e55ccd156b7a434d2ca04143ec2733cdae7c8319900454cc53bfcd806707aa82b2da2ffd2d04035937efdd24696051dacd952b1338de0d6a0ca1324d0ccf"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000006c0)={{0x0, 0x0, 0x7d5, 0x1, 0x3, 0x5, 0x8000, 0xc605, 0x400, 0x2, 0x6, 0x2, 0xc1, 0x4, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105842, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) pread64(r6, &(0x7f0000000000)=""/85, 0x55, 0xfff) 22:20:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) 22:20:36 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:20:36 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:20:36 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x0, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2794.523138] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2819.100537] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2819.104238] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2819.105502] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2819.106805] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2819.134378] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2819.136871] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2819.139440] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2819.141048] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2819.144236] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2819.177189] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2819.181665] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2819.183005] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2819.184682] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2819.196665] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2819.198857] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2819.200359] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2819.201650] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2819.205701] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2819.207146] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2819.209019] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2819.211483] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2819.213358] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2819.213472] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2819.215367] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2819.218910] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2819.232987] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2819.282183] raw_sendmsg: syz-executor.6 forgot to set AF_INET. Fix it! 22:20:37 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:20:37 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:20:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone3(&(0x7f0000000280)={0x8a0d0000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0xa}, &(0x7f0000000180)=""/35, 0x23, &(0x7f00000001c0)=""/76, &(0x7f0000000240)=[0x0], 0x1}, 0x58) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'virt_wifi0\x00', {0x7}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000080)={0x0, 0x2710}, 0x10) 22:20:37 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2819.332606] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2819.333300] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2819.333937] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2819.334612] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2819.335373] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:20:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) [ 2819.335484] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2819.508162] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2819.511236] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2819.512258] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2819.515232] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2819.516024] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2819.516832] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2819.520314] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2819.521291] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:20:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) 22:20:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:20:59 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x6, 0x1, 0x3f, 0x0, 0xe3, 0x40, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x8149, 0x800, 0x3, 0x6, 0x1f, 0x2, 0x1ff, 0x0, 0x812, 0x0, 0x3f}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0xf, 0x0, &(0x7f0000000440)) dup3(r0, r1, 0x8dd27116f7f7813) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) 22:20:59 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:20:59 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:20:59 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x80000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc4141, 0x0) bind$unix(r3, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 22:20:59 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:20:59 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2819.525032] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2842.224376] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2842.231899] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2842.234304] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2842.235723] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2842.237815] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2842.240611] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2842.242172] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2842.244386] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2842.244841] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2842.248984] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2842.249017] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2842.257473] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2842.269287] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2842.278711] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2842.279506] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2842.281610] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2842.297733] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2842.298961] blktrace: Concurrent blktraces are not allowed on sr0 [ 2842.301253] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2842.305492] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2842.312872] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:21:00 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2842.320991] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2842.327157] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2842.344436] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2842.355964] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2842.368784] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2842.370514] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2842.387990] blktrace: Concurrent blktraces are not allowed on sr0 22:21:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB='L\x00\x00\x00\x00\x00\x00']}) 22:21:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2842.510354] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2842.513017] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2842.516107] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2842.518326] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:21:00 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:21:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:21:00 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:21:00 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x1, 0xc8, 0xff, 0x8001}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x2, 0x8}, {0x8, 0x7, 0x500e, 0x7}}}}, 0x15) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@none, 0x2, 0x81, 0x4, "056159", 0x7a}, {@any, 0x5, 0x1, 0x9, "e86eb1", 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x4, 0x20, "7d5ac1", 0x5}, {@any, 0x2, 0x8, 0x0, "c7f04f", 0xd0e2}]}}}, 0x3c) 22:21:00 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x0, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2842.522653] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2842.717519] Bluetooth: hci3: ACL packet for unknown connection handle 200 22:21:00 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) syz_open_dev$vcsu(&(0x7f0000000000), 0xff, 0x20200) [ 2842.798997] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2842.803967] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2842.809906] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2842.813424] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2842.819160] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2842.824430] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2842.829249] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2842.833186] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2842.834467] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2842.835962] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2842.838577] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2842.843804] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2842.847868] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2842.852416] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2842.916175] blktrace: Concurrent blktraces are not allowed on sr0 22:21:00 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2842.969838] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2842.971178] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:21:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB='L']}) 22:21:00 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2842.974492] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2842.975806] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:21:00 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:21:00 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2843.098995] blktrace: Concurrent blktraces are not allowed on sr0 [ 2843.100522] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2843.111414] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2843.120784] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2843.124759] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2843.167611] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2843.168955] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2843.174960] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2843.176379] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2843.231146] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2843.234215] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2843.237505] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2843.239121] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2843.265881] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2843.273823] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2843.287473] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2843.288865] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:21:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000440)) lseek(r0, 0x400, 0x1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) [ 2843.316781] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2843.321150] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2843.329418] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2843.330928] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:21:01 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:21:01 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:21:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) [ 2843.490619] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2843.497541] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2843.503498] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2843.504622] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2843.573805] blktrace: Concurrent blktraces are not allowed on sr0 [ 2843.597271] blktrace: Concurrent blktraces are not allowed on sr0 22:21:23 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:21:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) 22:21:23 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="44010600"], 0x4) 22:21:23 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:21:23 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:21:23 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:21:23 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0xf, 0x0, &(0x7f0000000440)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0xf, 0x0, &(0x7f0000000440)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0xf, 0x0, &(0x7f0000000440)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000500)=0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000540)=0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r8, 0x0, 0xf, 0x0, &(0x7f0000000440)) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000700), 0x1000, 0x0) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ppoll(&(0x7f0000000780)=[{r2, 0x120}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x198}, {0xffffffffffffffff, 0x4440}, {r0, 0x8000}, {0xffffffffffffffff, 0x24}, {r8, 0x8a}, {r9, 0x4107}, {r10, 0x1000}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x1]}, 0x8) stat(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r11, 0x0) sendmmsg$unix(r1, &(0x7f00000005c0)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000080)="dad3ea04574fe69c260e11dd5648b438eee848205daa59531c22945475457a57e7898a98647835769e41b9046aa7c714827dc15c17c56530fb36947010963a2b2a9ef192b9d8a6eb1006827cd4390cfb208833e4e3371d065a3744f38461dd9904009d778badc66c8f63fecdad10947f26e9574eaa968437fb7dd19e5360e2ae11a5b96ef49188014fff0c7ee56dada4fe7852bc10f2ef223d4026fd0adb821490654af5cf33dff621320b587d038c316b69e161ee878154bfc76cdfc8c7d5da561fbe29b7ff9ca7fb310b2866ce6d82e09d2c5001e7a807ef25aceaa3fdbb100060709498450cf8aa", 0xe9}, {&(0x7f0000000180)="d4bc95bf6ed9a3e6e9ddf162aab92690504faae40aa4653700655160359ee4d0ce2eb6", 0x23}, {&(0x7f0000000280)="4c7027d74820d29fb713e18ba8caf57a26419ef72f723023b2bb096112aac85d9453934dc7cc2de134059df6a6e562b3106c678b2995f9b4a95f1d73396e7b5d1efaa80c31eaf5767cd85e4c34962c39736a463f9edee6e9f0f1ef42c21025e2522fd29a0c1f23bf1bdcc1becdaabc6507d396fcace4a4f72d05d6dae337c1df00bea575e4b3630cd38da7548cdd0f49b71d6d67160db8805943d3e3806c1545d502cd31f2aa93a68ebbacd8a21b3bc19fa3718556bd4290f348e816105c19278076", 0xc2}], 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="14000200"/16, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="04000000"], 0xa0, 0x800}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, 0xee01}}}], 0x40, 0x11}}], 0x2, 0x20000000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:21:23 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2865.582146] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2865.583540] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2865.584996] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2865.586637] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2865.587992] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2865.589692] bt_err_ratelimited: 10 callbacks suppressed [ 2865.589735] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2865.590892] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2865.593471] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2865.593625] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2865.596256] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2865.597573] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2865.598931] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2865.600247] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2865.601615] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2865.603269] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2865.603513] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2865.605039] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2865.646446] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2865.649664] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2865.655422] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2865.657175] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2865.685897] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2865.687287] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2865.689365] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2865.690982] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:21:23 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:21:23 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:21:23 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:21:23 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2865.697005] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2865.774133] blktrace: Concurrent blktraces are not allowed on sr0 22:21:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000001180)=ANY=[@ANYBLOB]}) [ 2865.871274] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2865.872985] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2865.879619] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2865.886830] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2865.888963] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2865.889255] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2865.900274] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2865.903143] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2865.904708] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2865.906027] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2865.907445] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2865.908754] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2865.910345] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2865.910579] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2865.915388] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2865.917977] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2865.937286] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2865.939733] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2865.944409] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2865.947484] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:21:49 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x7ececb442c511794}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x4040) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="ef3dc628"], 0x4) 22:21:49 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:21:49 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:21:49 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:21:49 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:21:49 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:21:49 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x2a0102, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x111000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 22:21:49 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2891.474136] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 2891.475715] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 2891.487355] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 2891.497906] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 2891.499504] bt_err_ratelimited: 1 callbacks suppressed [ 2891.499545] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 2891.566235] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2891.566286] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2891.569184] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2891.569945] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2891.571785] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2891.572362] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2891.573306] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2891.573645] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2891.574313] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2891.574431] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2891.575157] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2891.575237] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2891.578268] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2891.579459] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2891.580770] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2891.586225] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2891.586682] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2891.588705] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2891.595810] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2891.597677] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2891.602880] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2891.616519] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:21:49 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) lseek(r0, 0x6, 0x2) [ 2891.622659] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2891.634157] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2891.636157] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2891.657255] blktrace: Concurrent blktraces are not allowed on sr0 [ 2891.679194] Bluetooth: hci4: ACL packet for unknown connection handle 200 22:21:49 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2891.840286] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2891.841690] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2891.843757] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2891.844567] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2891.846622] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:22:12 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x7fff, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7f, 0x2}, {0x6}}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}, {0x7f}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x9}}]}}, 0x25) 22:22:12 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:22:12 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:22:12 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:22:12 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) inotify_init() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x7, 0x7, 0x3f, 0x3f, 0x1a, "cb1c9ccbd01a5224345446fd0ddbf1b0e358e3"}) r3 = dup3(r2, r1, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x9, 0x201, 0x0, 0x0, {0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:22:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:22:12 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) lseek(r0, 0x6, 0x2) 22:22:12 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2891.847018] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2914.606500] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2914.611405] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2914.615248] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2914.619217] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2914.622290] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2914.680252] blktrace: Concurrent blktraces are not allowed on sr0 [ 2914.689779] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2914.693255] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2914.697669] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2914.699426] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2914.703759] Bluetooth: hci4: SCO packet for unknown connection handle 200 22:22:12 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="5958ef154100"], 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x7f}}]}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x6, 0xa}, {0xf000, 0x1f, 0x192, 0xea}}}}, 0x17) [ 2914.746828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2914.758424] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2914.778872] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2914.784632] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2914.786328] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2914.788472] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2914.793391] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2914.797335] blktrace: Concurrent blktraces are not allowed on sr0 [ 2914.802994] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2914.804848] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2914.813459] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2914.823793] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2914.825584] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2914.845407] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2914.849682] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2914.856714] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2914.859988] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2914.890902] blktrace: Concurrent blktraces are not allowed on sr0 22:22:12 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:22:12 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x0]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:22:12 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:22:12 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:22:12 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) lseek(r0, 0x6, 0x2) [ 2915.146184] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2915.153490] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2915.158487] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2915.159679] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:22:13 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2915.210521] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2915.216564] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:22:13 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2915.233479] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2915.234969] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:22:13 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2915.260005] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2915.262484] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2915.264376] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2915.272963] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2915.274464] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:22:13 executing program 4: stat(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100000, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@privport}, {@access_uid={'access', 0x3d, r0}}], [{@obj_type={'obj_type', 0x3d, 's&'}}]}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) [ 2915.283345] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2915.286920] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2915.288477] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2915.296343] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2915.304863] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2915.306597] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2915.319628] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2915.425733] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2915.429773] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2915.433744] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2915.434855] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2915.439991] blktrace: Concurrent blktraces are not allowed on sr0 [ 2915.476524] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2915.483268] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2915.486107] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2915.487341] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2915.584372] blktrace: Concurrent blktraces are not allowed on sr0 22:22:13 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) lseek(r0, 0x6, 0x2) 22:22:13 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2915.666628] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2915.667628] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2915.668628] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2915.669583] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:22:33 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:22:33 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:22:33 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x3, 0xce, &(0x7f0000000000)="6287f9179182a1889474209eb19160889417da7f61dfe63f742ad7f1be21efc07088c1f26d2bb6ca2a45243cdc204d2cb8cc3f8f9e2fb339579ba2538c3dc8a43e3816e10f4f3e9ed7604d78b2688d489bd7cbf38ed22325e0161687e959ae5898915012f48d80a8e6851bffdf86c32ed33a478be77ea57f3534256b4d289c8f7540951aa07ff5d2ac16b94fd0ccca98cb547402b413a4011e6e62c915f9a7b6ea59bb962c214ba4586d54e8854013eeb9a489cf452f80e168f743ebf9d2040a2cdd2aae0950abba890b885651a1"}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:22:33 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04540b00"], 0x4) 22:22:33 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:22:33 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:22:33 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) lseek(r0, 0x6, 0x2) 22:22:33 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 2936.199677] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2936.201287] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2936.203802] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2936.205295] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2936.207966] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2936.208878] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2936.210355] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2936.211607] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2936.215004] bt_err_ratelimited: 4 callbacks suppressed [ 2936.215580] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2936.217671] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2936.285910] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2936.287780] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2936.291136] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2936.291954] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2936.294691] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2936.328844] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2936.330661] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2936.331114] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2936.338297] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2936.339692] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2936.341762] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2936.342355] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2936.346896] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2936.360758] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2936.361994] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:22:53 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:22:53 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x5, 0x3}) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000040)) 22:22:53 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) lseek(r0, 0x6, 0x2) 22:22:53 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:22:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:22:53 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:22:53 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:22:53 executing program 4: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) connect(r1, &(0x7f0000000580)=@llc={0x1a, 0x300, 0x8, 0x1f, 0x43, 0x80, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "a2fdf3d1b07d15de62725c6106f678b6527151d60e7824d0b4801f885f0adada16df8290c4866442640c41682e511161705e6ee8413ca4b146ec8d23534884a4dd5a4d7238e587f648f21c6edc9eac71c73c4ffa6d3a07d4adfbc203b1cc0eec48529dc3d368eec15f539fd345d20abea768033691cdcc270598464f906a06c05161687b788607fa6d02982ec74f40be3aa2dda3c1b7211d34dcbb1516c9b453b37054c97b35859939f8"}, 0xae) r4 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0xa55, 0x1, &(0x7f0000000400)=[{&(0x7f00000003c0), 0x0, 0x10000}], 0x884810, &(0x7f0000000440)={[{@rodir}, {@utf8no}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@shortname_win95}, {@shortname_win95}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, '-!+'}}]}) openat(r4, &(0x7f00000004c0)='./file0\x00', 0x40200, 0x120) [ 2936.364309] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2955.749973] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2955.751645] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2955.753938] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2955.754774] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2955.757187] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2955.758143] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2955.758858] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2955.760111] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2955.763157] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2955.763450] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:22:53 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:22:53 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2955.765502] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2955.833307] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2955.849749] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2955.864193] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2955.865363] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2955.868884] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2955.874843] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2955.908096] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2955.918408] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2955.919574] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:22:53 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2955.930613] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2955.939399] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2955.945270] blktrace: Concurrent blktraces are not allowed on sr0 [ 2955.946112] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2955.953301] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2955.954826] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2955.963938] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2955.976375] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2955.980454] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2955.983435] loop4: detected capacity change from 0 to 256 [ 2955.987013] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2956.014807] blktrace: Concurrent blktraces are not allowed on sr0 [ 2956.022897] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2956.025276] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2956.063171] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2956.072970] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2956.083341] loop4: detected capacity change from 0 to 256 [ 2956.088655] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:22:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2956.090289] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:22:53 executing program 5: lseek(0xffffffffffffffff, 0x6, 0x2) [ 2956.109455] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2956.189684] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2956.207084] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2956.214124] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2956.214843] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:22:54 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}], 0x18}, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x21, 0x10000, 0x0, 0x2f}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x680) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="05000000000000002e2f66696c6530005e0ebc49f35cb4d26ee0b3eb11625b87adffb332daee27e9cded9e890accd3da131391ab473198ca63817de2a11d6db55a939ffd4c1701eb2ee94471d5e57e5e9f31640420d641"]) 22:22:54 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2956.225424] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2956.226710] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2956.265329] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2956.268202] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2956.269727] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2956.270587] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:22:54 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:22:54 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2956.364942] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2956.365850] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2956.367773] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2956.371897] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2956.383209] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2956.384095] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2956.385222] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2956.387874] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:22:54 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:22:54 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:22:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xb, r0, 0x0, 0x0, 0x0) keyctl$set_timeout(0xf, r0, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000011c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000001200), &(0x7f0000001240), 0x2, 0x1) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000040)) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xb, r2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) r3 = accept4(r1, 0x0, &(0x7f0000001280), 0x80000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000012c0)={0x0, 0x1f, 0x400}) syz_emit_vhci(&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x115f) 22:22:54 executing program 5: lseek(0xffffffffffffffff, 0x6, 0x2) 22:22:54 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2956.552561] blktrace: Concurrent blktraces are not allowed on sr0 [ 2956.589259] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2956.593275] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2956.598958] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2956.600878] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2956.606459] blktrace: Concurrent blktraces are not allowed on sr0 [ 2956.618556] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2956.624381] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2956.631847] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2956.634698] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:22:54 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 2956.698642] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2956.701342] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2956.707593] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2956.715450] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2956.748734] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2956.754126] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:22:54 executing program 5: lseek(0xffffffffffffffff, 0x6, 0x2) [ 2956.763901] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2956.764581] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2956.765305] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2956.786839] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2956.791928] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2956.792663] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:22:54 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:22:54 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2956.988888] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2956.990916] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2956.993835] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2956.994914] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2957.004831] blktrace: Concurrent blktraces are not allowed on sr0 22:23:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:23:15 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:23:15 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xfffffffffffffffc, 0x2) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x863, 0x8, &(0x7f0000003500)=[{&(0x7f0000000100)="784e7cb8fb32b5e381a4be10de307a1d1a828b70d86e64b449561d6385234a55ab585dc2f176ac37c4b138ea88542d56f385117ab4dc6c3bf4e90bca6960d9251d8b23551086ad496b71c8726261be27bc5e3462a72b6c2ba9107e09d8ac54d3603e5d76ca1b60efba42b8b6582f68aeb106cb8a39c2c7c686bf531fdc12ce5d2f6088d748af784a9595", 0x8a, 0x100000001}, {&(0x7f0000000280)="6a545362f800d73b1d9364c0c5a30f69f8caf55432cacf1c7448e2e44b80ffaa2925336bb72b09c06f61c86c3a307b80b1b4f504fd7a3adcbb45b74148605f51b9a2bc2a4cde8e1b28f33ff9e51a3874ed5b13850b06de8f2ff5392bad1b2fb01bcc26a771fb6bdd3f8e8c49a074ea812788536670e83050ad4df5c7cbdb1afad6055b", 0x83, 0x6}, {&(0x7f0000000340)="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", 0x1000, 0x1}, {&(0x7f0000001340)="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", 0x1000, 0x7}, {&(0x7f0000002340)="132eb8adcc953070536c5308bcf1a8fe6c78d7c6bd8f36b2f8421870ab14cd3e4d1ec3fcef4a67ecf598dd268997b023ae16d8dd11e79b3c4ceb5ef1cdb340f718550dc14d858c514fc04712136d68bc13b995838f9d68d446c365046507f1bb9f9074bc6f8bb6f9e7873812cb1c81b57f6e149e70eccc3d2c", 0x79, 0x8}, {&(0x7f00000023c0)="cbdcfc8228d02ca3c77299a9c435549fcb072016e6cf51916accada5d95c787443d9106a0cf1a5e05e97", 0x2a, 0x80000000}, {&(0x7f0000002400)="5952f2f3be805461632caabd55f5da69b6795310c7eb10bb4c984a807a6546406f7318d644e665581c81d2240bfe536124ab8b3e00aedb1e85ccdb90116c995ea4f75af47f46edd0d481d0b4d9c34d072c4282efff7e5bc8ebf2b9fa2ad335efd3806824549c50209db0fd5d6a5ed0fc182c33077826a5e5db876b17adae1d0af2f50be2413a7f17ea7bf30d72b52db8f331e808895318393e80c543807952c129c55c31ed77debc7aa80beff7c3d9a77343062a6c5aed23b85c69d365fbdc129a5e0aafd3c5905ec0535283f273b47c7acf82e94bee9c5a057a5942a1b1891f7d7fa5cdb047", 0xe6, 0x80000000}, {&(0x7f0000002500)="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", 0x1000, 0x6}], 0x8000, &(0x7f00000035c0)={[{@size={'size', 0x3d, [0x67, 0x34, 0x65, 0x37, 0x39, 0x39, 0x25, 0x67, 0x74, 0x31]}}, {@size={'size', 0x3d, [0x37, 0x70, 0x32, 0x6b]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x38]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x0, 0x2d, 0x68, 0x35]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x34, 0x33, 0x36, 0x38, 0x30]}}, {@huge_always}], [{@subj_user={'subj_user', 0x3d, 'unlock all\x00'}}, {@obj_user={'obj_user', 0x3d, 'unlock all\x00'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@dont_appraise}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, '(!(-\'-'}}, {@subj_type={'subj_type', 0x3d, ']'}}]}) write$vga_arbiter(r0, &(0x7f0000000040)=@unlock_all, 0xb) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x585802, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) fchmod(r0, 0x0) 22:23:15 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:23:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x4) 22:23:15 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x0, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:23:15 executing program 5: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) lseek(r0, 0x6, 0x2) 22:23:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2978.148720] loop6: detected capacity change from 0 to 264192 [ 2978.158062] tmpfs: Bad value for 'size' [ 2978.174088] loop6: detected capacity change from 0 to 264192 [ 2978.182292] tmpfs: Bad value for 'size' [ 2978.194471] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2978.197524] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2978.201463] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2978.202175] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2978.205187] bt_err_ratelimited: 9 callbacks suppressed [ 2978.205211] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:23:16 executing program 5: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) lseek(r0, 0x6, 0x2) 22:23:16 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2978.209225] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2978.276362] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2978.277662] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2978.278320] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2978.279205] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2978.282104] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2978.282746] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2978.283440] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2978.285334] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2978.286436] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2978.287705] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2978.288511] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2978.293890] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2978.303624] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2978.327238] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2978.329531] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2978.332078] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2978.335450] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2978.340656] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2978.340880] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2978.344531] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2978.411554] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2978.415395] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2978.426597] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2978.427464] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2978.429706] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:23:37 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7c80db4b3de6f0b9d3b35a23d2594dba983848cf84a31de5184b6bb857e73b3c5fd91a033a777f985c71a90f8ccd4a8be393d22eff11ca"], 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x24}, @l2cap_cid_signaling={{0x20}, [@l2cap_create_chan_rsp={{0xd, 0x80, 0x8}, {0x5, 0x8, 0x3d6, 0xffff}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x6, 0x6, 0x3f, 0x400}}, @l2cap_move_chan_rsp={{0xf, 0x2f, 0x4}, {0x6d, 0x8}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "137933a89b4c1daa2b1f82868b203088b415417a675aebfa2731c45508c0c1955d875ce1bc27afd4fc5c68647eac47833e4c1780982693d27a8ae282a7dca7d7ea7077dd5ce9e578ab079338fd2526b95f6adc42bef79182872843584a21e7f6003ca48c8268ac9168413690766425b4ef23456165fac06196fda52c57be65b03110e2b4461928c4e90f451992e6d40d237a4bdaf1aec14cc69533cb68669052ecbecd5834fed25a1c0f6d26549ad890cd1cde4b"}, 0xb8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8a00e000a02050019fe0600070000000300"], 0x13) 22:23:37 executing program 5: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) lseek(r0, 0x6, 0x2) 22:23:37 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:23:37 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:23:37 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:23:37 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:23:37 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x6, 0x0, 0x4}}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0xf, 0x0, &(0x7f0000000440)) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x5}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000040)={0x5c, @broadcast, 0x4e23, 0x2, 'lblc\x00', 0x24, 0xc4, 0x72}, 0x2c) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:23:37 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2978.430325] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2999.251665] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2999.257505] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2999.261433] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2999.262342] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2999.265353] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:23:37 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0x6, 0x2) [ 2999.267787] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2999.358124] blktrace: Concurrent blktraces are not allowed on sr0 [ 2999.360357] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2999.364111] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2999.364758] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2999.367866] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2999.368780] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2999.377105] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2999.383898] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2999.384779] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2999.387107] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2999.400435] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2999.408156] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:23:37 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2999.437689] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2999.438875] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:23:37 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 2999.443784] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2999.455868] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2999.456592] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2999.462269] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2999.471300] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2999.472652] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:23:37 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x57) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0xed}, "980c85bbb76220e3c357bc99b764552c4b6f60233612b79c6d00578a408823b61be0f7302bc9bc9c88de55b8935678f3f23644957e71843456b1384b0500684951fa4d10a8251262fd9c633cec6b99f5b6ef09bb17de515c71cfc2d92e8a4a9d40395696cdfc0d2e81dca4f0f498d4597f8fcee5fe88757afa09f10b71eb3b32185c8d67dd0e0925466c3f966eb3743e02525f526534ead812eeadd35d596bb566c70a48942b5b073d6884baf5ceaca49e4415aae3b59bb25232d710622d438e211895bbf543a822718226b9eac3aca69ac967a3525242f86d232fee4ea82da6ca03d07a110f989c2c4733364e"}, 0xf1) 22:23:37 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:23:37 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0x6, 0x2) [ 2999.485432] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2999.750122] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2999.751630] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2999.753932] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2999.756975] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2999.760436] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2999.766188] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2999.783510] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2999.789810] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2999.790869] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2999.791960] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2999.793812] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2999.795559] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2999.797388] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2999.798380] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:24:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setgid(0x0) setresgid(0x0, 0x0, 0x0) getgid() syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="00e70000f1000000"], 0x4) 22:24:03 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0x6, 0x2) 22:24:03 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:24:03 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x76080) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0xc380, 0x0) syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0xf, 0x0, &(0x7f0000000440)) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0x2, 0x0, 0x3ff, 0x0, 0x1}, 0x8) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x412600, 0x0) pwritev(r7, &(0x7f0000000400)=[{&(0x7f0000000380)="147d987612133c2ab9d5311185e2db6d2687a740c9f7b4bd7568d0b21fff42f36160c7cbcdeab4b7390a6510a291cc71388382234703f4742aca252bdb3545", 0x3f}, {&(0x7f00000003c0)="bc9fb773aa0241eeb99dfca814dccce9dbefde70a6d7de337cded467b72a95c08e7cb184e007e2db1fa3aa2e01df", 0x2e}], 0x2, 0x3, 0x1) io_submit(0x0, 0x2, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0xff80, r1, &(0x7f0000000040)="0a6bc9bb9b8273a408636ac203dcd3878e5a69a96b79f7b409bce58554114034aa6541526bb819598894c2b81beb3e2d555bf61aaac1ac538e5a86ed2e4c0032b2704304b94b817a84d8dfe2543be9a2377f058eaba9429e2833f8a494ae4a3b027a31294f6806bc8a6f34887c4b09599b26ab49", 0x74, 0x7, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0xff, r0, &(0x7f0000000100)="6e8a7c8d27a1cfb50415bb5421130b3a08fd3a66f7884bac625de74cdc138683b0fe97d08364a6f99fd800ac41efed00623b93c277bf7367e0547e15214ec2321595719a18b11225538e47cc63df535ec2eda93840d6f06b42f6", 0x5a, 0x8, 0x0, 0x2, r2}]) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:24:03 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:24:03 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:24:03 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:24:03 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 2999.801509] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3025.763304] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3025.767395] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3025.768175] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3025.768827] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3025.771575] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3025.772433] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3025.773689] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3025.775199] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3025.776709] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3025.777307] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3025.779207] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3025.781710] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3025.782469] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3025.792457] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3025.808780] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:24:03 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 3025.818628] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3025.865889] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3025.869979] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3025.878315] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3025.884223] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3025.885355] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3025.886049] blktrace: Concurrent blktraces are not allowed on sr0 [ 3025.886835] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3025.889284] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3025.892828] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3025.902509] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3025.903973] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3025.959450] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3025.963782] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:24:03 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 3025.983205] blktrace: Concurrent blktraces are not allowed on sr0 [ 3025.987293] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3025.988523] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3025.993431] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3026.017914] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3026.020208] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.021802] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.022713] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.024872] Bluetooth: hci3: SCO packet for unknown connection handle 200 22:24:03 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 3026.084924] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3026.087998] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.089783] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.090716] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:24:03 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:24:04 executing program 5: openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) lseek(0xffffffffffffffff, 0x6, 0x2) [ 3026.092842] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3026.182864] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3026.186401] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.189138] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.190630] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:24:04 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:24:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:24:04 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:24:04 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3026.194701] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3026.301729] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3026.309242] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.309885] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.310532] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:24:04 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x22, 0x23, 0x10000, 0xffff}) io_setup(0x7, &(0x7f0000000a80)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r1, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0xc, 0x1, 0x0, r2, &(0x7f00000001c0)="10", 0x1}]) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000100), 0x1f, 0x41a200) io_submit(r1, 0x3, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x1915, 0xffffffffffffffff, &(0x7f0000000200)="85161238568d634144e0f90ab47edda243ee2400b579dd9ec223a3221dd383e38b03160f2384f67787b321ae33eb6870357bc818c4c44fbb38751ab0963e1fa38c83479b26ef6b8c9927287cdfddbe49963d4e7edfce3661728eb0e63d2c9e7ac03bcdd7b69f6bca8c4f449205d335e9619a43224f3e34a445c52425efdef7416fba8c129fac960df7d1b509bd4144c432e19a09bbe292ca21e0d896237bda2800b6e2b94433dc5a267a0cd8beea723c521eeb27281d597565066109a6a43ddcf29b0e750544e2c707bade73b5edd4267b57ab5bcd575baf80d8afc242f9b203ebb90960d73eb3e60fd0dd935a5c7ee1ab7634", 0xf3, 0x7fffffff, 0x0, 0x0, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x5, r4, &(0x7f0000000300)="6b431e29781aa4ab64e0538ccdde47b4471303150ea69af135da08592994a5bcdba8f79d79d89cd21583a70a71d3787c7163141ed2a2be075da06b69a2c4a79d649424b17984e17b680aec8a5e742594b1a43d0450e1c4ff8bda3b4e2cf3c90c76560bfe108530d29fb773974efc943d9e014b74427a25d349dd25847c25cda0edff132ad2c7372ae15c04288b0acc59f53bf09897f4a43d1b2f0d2fd6e46a65c52f3454ef787715b2e5f3c3c142d6d5cd2288f545cadfac3df9b417a4b3005a27c58bf750b2f81e59fa747c3df94ea0d7e316abdd09ea411831f21dd566e346039707b5f010059128", 0xe9, 0x8000, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0xab, r0, &(0x7f0000000180)="da8c375f", 0x4, 0x299, 0x0, 0x3, r0}]) [ 3026.359722] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3026.368390] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3026.369272] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:24:04 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x0, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 3026.405408] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3026.407142] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3026.407949] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3026.410188] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3026.415754] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3026.419061] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3026.420240] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3026.420958] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3026.430311] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3026.431550] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.434175] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.435113] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:24:04 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x0, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 3026.496345] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3026.499771] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.503457] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.505434] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3026.585215] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3026.601639] blktrace: Concurrent blktraces are not allowed on sr0 22:24:27 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:24:27 executing program 5: openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) lseek(0xffffffffffffffff, 0x6, 0x2) 22:24:27 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:24:27 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x0, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:24:27 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:24:27 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:24:27 executing program 4: fsync(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="c9b6405eca2c9b075d22421c89680a3f29f7b16aa618fbd3529c31be42051d24fec22718ff3ff8757ddff4cf79c96cbe9c6ac774c5fe3520c997f0dac1902bdaca6e593be4903813359de8f299184eef61e570c0a6119fc6ffdc0115e0a7c7cd230e7f50b88d6df31260ae6d8f8d8e0afed0a66d6c2655a72b67651199b64e47285cdd2678eaf0927d5e82ffc22f425d553d03b5fe5fc882bc8d3aeddda7ba00000083bf1f7d340be4b4eac0f084f728e172bac410a37132"], 0x4) syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xc5) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, r3, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x20, 0x100, 0x1}, 0x1) 22:24:27 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0xf1bd, 0x23, 0x10000, 0x0, 0x80000000000}) [ 3049.974802] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3049.977801] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3049.981669] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3049.983105] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3049.986281] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3049.988680] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3049.991146] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3049.993986] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3050.000278] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3050.002413] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3050.004739] bt_err_ratelimited: 7 callbacks suppressed [ 3050.004785] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3050.011825] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3050.013186] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3050.015851] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3050.020952] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3050.024511] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3050.026350] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3050.027535] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3050.030093] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3050.034110] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3050.035198] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3050.041069] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3050.043666] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3050.047594] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3050.058317] blktrace: Concurrent blktraces are not allowed on sr0 [ 3050.060314] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3050.061674] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:24:27 executing program 5: openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) lseek(0xffffffffffffffff, 0x6, 0x2) 22:24:28 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x0, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:24:28 executing program 4: dup(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) 22:24:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:24:28 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x0, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:24:28 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:24:28 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 3050.442151] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3050.443701] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3050.446695] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3050.448124] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3050.449549] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3050.450990] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3050.452445] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3050.456077] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3050.457689] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3050.518236] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3050.521964] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3050.524717] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3050.526957] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:24:28 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:24:28 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x0, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:24:28 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) lseek(r0, 0x0, 0x2) [ 3050.529976] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3050.701336] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3050.708648] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3050.753692] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3050.769302] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3050.770922] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3050.791199] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3050.796186] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3050.797602] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3050.801342] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3050.802759] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3050.805365] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3050.807610] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3050.812091] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3050.813816] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3050.898823] blktrace: Concurrent blktraces are not allowed on sr0 22:24:52 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x8e, 0xa}, {0x1f, 0x6, 0x401, 0x5, 0x6}}}}, 0x17) 22:24:52 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 3074.874688] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3074.875442] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3074.876127] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3074.876727] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3074.877546] bt_err_ratelimited: 3 callbacks suppressed [ 3074.877568] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:24:52 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:24:52 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:24:52 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:24:52 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x0, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:24:52 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) lseek(r0, 0x0, 0x2) 22:24:52 executing program 6: stat(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="a6c134fc8b6d0b5a7a2091a86d502ff148d43231085281b7dcc8c61a26a79973220674f986d11280d09477bee4a11a6cf948fdb1f5fcac98f071d50f3d1ec0d9191238c8496e9d20467754e9e1445a58467b21f29e78185f465d13b925904556", 0x60, 0x3ff}], 0x8002, &(0x7f0000000280)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x0]}}, {@huge_advise}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x65]}}, {@huge_never}, {@mpol={'mpol', 0x3d, {'default', '=relative', @void}}}, {@huge_within_size}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d]}}], [{@obj_role={'obj_role', 0x3d, '%\\+'}}, {@euid_gt={'euid>', r0}}]}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:24:52 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3074.878155] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3074.921855] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3074.923628] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3074.927455] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3074.928315] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3074.931281] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3074.945376] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3074.948848] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3074.950248] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3074.959699] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:24:52 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 3074.972727] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3074.973717] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3074.976301] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3074.977490] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3074.978808] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3074.980781] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3074.985146] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3074.986856] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3074.993152] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3074.997417] loop6: detected capacity change from 0 to 3 [ 3074.999767] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3075.006724] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3075.021596] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3075.025455] tmpfs: Bad value for 'nr_blocks' [ 3075.042086] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3075.051315] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3075.052575] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3075.061098] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:24:52 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) lseek(r0, 0x0, 0x2) 22:24:52 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04010100"], 0x4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB='k\x00'], 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) [ 3075.066881] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3075.126717] blktrace: Concurrent blktraces are not allowed on sr0 22:24:52 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3075.169495] loop6: detected capacity change from 0 to 3 [ 3075.178714] tmpfs: Bad value for 'nr_blocks' [ 3075.209613] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3075.214331] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3075.219920] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3075.221788] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3075.226877] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:24:53 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:24:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:24:53 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3075.230433] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3075.395961] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3075.405803] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3075.417366] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3075.424686] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:24:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="ff030000"], 0x4) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e0d05c90008002000000000000000"], 0x10) 22:24:53 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3075.610666] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3075.615218] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3075.621514] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3075.624427] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3075.686562] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3075.691132] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3075.693432] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3075.695229] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3075.737088] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3075.745217] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3075.754431] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3075.755746] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3075.779312] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3075.781813] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3075.784436] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3075.786112] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:25:18 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) lseek(r0, 0x6, 0x0) 22:25:18 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xffffffff, 0x10000}) 22:25:18 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:25:18 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:25:18 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:25:18 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:25:18 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0xf6, 0x0, {0x4, 0xffff, 0x80000004, 0x80, 0xb0}}}}, 0x17) 22:25:18 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 3100.886210] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3100.891633] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3100.892837] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3100.894472] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3100.895801] bt_err_ratelimited: 6 callbacks suppressed [ 3100.895824] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:25:18 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3100.896876] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3100.962299] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3100.963556] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3100.964364] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3100.967068] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3100.969088] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3100.971337] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3101.023721] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3101.026122] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3101.028098] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3101.028837] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3101.087788] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3101.099450] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3101.112342] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3101.114837] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3101.124580] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3101.125710] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3101.131650] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3101.137374] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3101.139669] blktrace: Concurrent blktraces are not allowed on sr0 [ 3101.146918] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3101.149445] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3101.152900] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3101.154244] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3101.156295] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3101.156537] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3101.158141] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3101.159951] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3101.180665] blktrace: Concurrent blktraces are not allowed on sr0 22:25:39 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:25:39 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:25:39 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:25:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:25:39 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "ba9124", 0x1}}}, 0xd) 22:25:39 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000200f9ffffffffffffffab28b29a04ec00000000463c00000000000000000000540000000000"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24060000}, 0x40800) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:25:39 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:25:39 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) lseek(r0, 0x6, 0x0) [ 3121.248039] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3121.251164] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.253340] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.255399] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.256734] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3121.257691] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3121.260172] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3121.262791] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3121.271085] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3121.271933] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3121.275067] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3121.275688] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3121.282640] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3121.285399] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3121.288290] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3121.289581] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3121.290671] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3121.292896] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3121.297501] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3121.304165] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3121.305361] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3121.315924] blktrace: Concurrent blktraces are not allowed on sr0 [ 3121.331115] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3121.331760] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3121.332434] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3121.333113] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:25:39 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:25:39 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3121.335728] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3121.402019] blktrace: Concurrent blktraces are not allowed on sr0 22:25:39 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:25:39 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 3121.475026] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3121.475753] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.476419] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.477080] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.477828] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:25:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x610400, 0x180) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c9007d6a798bf389552bda0ca4be8a52535c8a5d270e4f2d792368b1813b58353e6c351e492321383d4392d5aceed7d1f360dc78089bba0f4ca437f78f03c42b1fac2d1458dc86eb31ecc3cfa1bce5cd72efbbdfbe2f0c011d836ed4e04d722fa9b87dc8dfb00dac1159b42b0914233e5e3cad58b9a51a7254ce542f761357e9"], 0x81) 22:25:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:25:39 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3121.477941] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3121.563198] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3121.565211] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.566530] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.567347] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.568779] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:25:39 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:25:39 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 3121.569343] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3121.648249] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3121.651961] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.653352] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.654343] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.685131] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3121.686236] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3121.689301] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:25:39 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3121.690869] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3121.724342] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3121.727075] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.728888] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.729654] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.752239] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3121.752881] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3121.756022] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3121.762773] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3121.763431] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3121.764075] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3121.764853] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3121.765495] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:25:39 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:25:39 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) lseek(r0, 0x6, 0x0) 22:25:39 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3121.837863] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3121.841405] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3121.842372] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3121.849203] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3121.870529] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3121.873704] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.878933] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3121.887419] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:25:39 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:25:39 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:25:39 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3121.994378] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3121.996420] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3121.998131] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3121.999474] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3122.000166] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3122.005148] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3122.012580] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3122.014799] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:25:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x0, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 3122.149225] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3122.151471] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3122.154421] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3122.155110] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3122.155901] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3122.159059] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3122.162403] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3122.163075] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3122.175865] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3122.178962] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3122.180034] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3122.180673] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:26:03 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "e5bfa17cff669c727da79a274d015fab412b535dcec11180b5f2e51aebb650d3593a14131646d5d820611c5a67dd86eb76bac5c58097ec3577c1977d8cf209e214b7d5ff9a4a94e06da5edfead2c646b8c90ebb66bb732ed1a76a38bc0bf8fab862d605aeed7650c9a81d4f8f3d3344ae622679bc4510f98a2ffb83927c3a48044d2839f71ed2ea08c71f14ae8"}, 0x91) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xdd}, "542437591dd2f64b677655025b09d3864e496bee5f5a67398340db1b689b40401c116b93458bd37fad270da05a15ec95de439e81ca512c39ce120ccb9c3cc48b50f03184b91d568eb4ccd303f4a2bd5cd4a41e170b2ee3fbe898db8648304c1563d1787e21c4d0c4591196d0f12a1cc200495b633889ffeb042bec0fc9599c04f55ae1efda7676663abbee1dba9c97b658fd1de8f0af733b9f10c65e0dda61436df85006a5c153d99a55e81c2624ee9dfec225f848b788a72e003812d3c60fa19c266f20888d2f0e9275b1c2a08fa9cbe704b26ea764811c1bb37640c4"}, 0xe1) 22:26:03 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40a90fe395111bbf, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:26:03 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:26:03 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:26:03 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:26:03 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:26:03 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:26:03 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 3145.739324] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3145.742584] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3145.747392] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3145.750715] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3145.752649] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3145.754138] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3145.755626] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3145.757300] bt_err_ratelimited: 16 callbacks suppressed [ 3145.757348] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3145.758681] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3145.763275] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3145.801875] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 3145.807105] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 3145.810666] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 3145.812923] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 3145.875567] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3145.887258] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3145.890565] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3145.892307] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3145.895909] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3145.897369] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3146.003313] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3146.007167] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3146.008506] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3146.009851] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3146.011293] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3146.011520] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3146.019745] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3146.023624] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3146.029095] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3146.030790] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:26:28 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:26:28 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:26:28 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:26:28 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:26:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:26:28 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:26:28 executing program 4: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="9a01e32c4226f500020000351a22c179fdfa022f28d1ab7ed84793fe7f65bb7e253082df1a6ab183074bc2fb8fa9b5e42f406ff30a393b7a03de0d1b85139fb1dc80732b5ff09e71f5621d2df9df3e9ecdb732f7b39491503b639dd4c12c7b8096558d07e1233a8fdf75a720dedb9c5b809c1da4a872833d03e8279a67080ba5aba7f9d306761c82f3d91bf4865c55e1b1dfc38ea84268c6edf2f59bc3fafac8bf39599f3c0a3a3fcc055fc46daed2fe350e817d32e88a6eeff1df37acfa7d182034339a71"], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x1fe, 0x81}}, @l2cap_conn_req={{0x2, 0x40, 0x4}, {0x7fff}}, @l2cap_move_chan_rsp={{0xf, 0xef, 0x4}, {0x8001, 0xdf}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:26:28 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 3171.113941] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3171.116199] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3171.118264] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3171.119664] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3171.121720] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3171.122703] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3171.150808] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3171.153300] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3171.159022] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3171.161046] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3171.161713] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3171.162499] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3171.164199] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3171.165169] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3171.170526] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3171.174033] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3171.188300] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3171.189080] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3171.193510] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3171.204320] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3171.206638] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3171.215226] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3171.217231] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3171.222711] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3171.227258] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3171.231528] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3171.250202] blktrace: Concurrent blktraces are not allowed on sr0 22:26:29 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x2, 0x6, 0x5, 0x8, [0x2, 0x9, 0x80, 0x7]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 3171.289783] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3171.290470] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3171.291116] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3171.291729] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:26:29 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:26:29 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:26:29 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:26:29 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:26:29 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 3171.394392] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3171.395579] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3171.398820] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3171.399653] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:26:29 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="596401b36bfa862dacb8"], 0x4) 22:26:29 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 3171.490462] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3171.492385] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3171.494741] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3171.495524] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:26:29 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x0, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 3171.573406] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3171.576510] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3171.580475] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3171.584007] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3171.585351] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3171.586750] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3171.587450] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3171.607683] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3171.608348] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3171.620090] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3171.620726] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3171.621562] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3171.630811] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3171.631066] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3171.632388] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:26:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setgid(0x0) setresgid(0x0, 0x0, 0x0) getgid() syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="00e70000f1000000"], 0x4) 22:26:29 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3171.633374] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3171.734379] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3171.738500] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3171.766652] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:26:29 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x39}, {0x9, "3199977898f362ceaca0cd967a21fa53fd50e4fceb3319f5354b4a197e294cd165b8318a88c52e83e6f2c4f084aee945bdee19195e9dcb"}}}, 0x3c) [ 3171.775490] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3171.777212] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3171.778370] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3171.786146] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:26:29 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0xf, 0x0, &(0x7f0000000440)) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [{0x20, '\x00'}, {}, {}, {0x20, '#@'}, {0x20, '\x00'}, {0x20, '&\\)'}, {0x20, ':%[%%^'}, {}, {0x20, '/dev/sr0\x00'}], 0xa, "2f7afc110c839c0e135e01b0cce2d65abf348c9cb12ca478609afc2263b53ea341b1465f5daf8d27da79a9a45c42e39a084e0c0e0eb0baa17ac9940dabca3596dd2a322918193a85a60320eb173cee1c958c7baee302b98de29581dc4df58d6dfb02c06cb2eb1bd2b7923b2cfa8f642d83c7f91cafd4e2d257fb550f4e55f7a6fa210b8bfe"}, 0xaf) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="9a0000000108000000008b0fe1febb355639b1d207f8d5c3cc581fbfeac73b0a709fad7cacc6270210790d0d3e5be62a33501e7a451a5923d53a8d00f3587d8795f74d2a829561158f1105dc341d8650606184dd0eaa6e53e4d3b1cd1a7c2869e328500507afbdbb76572c000000000000", @ANYRES32, @ANYRES64]) [ 3171.796138] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3171.808830] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3171.814662] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3171.844847] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3171.845727] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3171.881183] blktrace: Concurrent blktraces are not allowed on sr0 22:26:29 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:26:29 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 3172.052440] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3172.067494] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3172.072102] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3172.073427] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3172.137015] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3172.137853] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3172.146037] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3172.146773] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:26:56 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:26:56 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x8000, 0x8001, 0x5}) 22:26:56 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x0, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:26:56 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:26:56 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:26:56 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0xbc}}, 0x4) 22:26:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setgid(0x0) setresgid(0x0, 0x0, 0x0) getgid() syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="00e70000f1000000"], 0x4) 22:26:56 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3198.527164] blktrace: Concurrent blktraces are not allowed on sr0 22:26:56 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10000000) [ 3198.655400] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3198.661141] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3198.665152] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3198.668182] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3198.672119] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3198.673926] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3198.677360] bt_err_ratelimited: 7 callbacks suppressed [ 3198.677403] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3198.687135] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3198.700837] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3198.703247] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3198.704761] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3198.712147] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3198.713785] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3198.724530] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3198.725814] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3198.728171] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3198.732803] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3198.767266] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3198.779270] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3198.781521] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3198.795586] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3198.806932] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3198.823341] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:26:56 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3198.836778] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3198.842716] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:26:56 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:26:56 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x20, 0x8}, {0x6, 0x2, 0x1, 0x4}}}}, 0x15) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x4, 0xa}, {0x1, 0x4, 0xa3c, 0x4, 0x427c}}}}, 0x17) [ 3198.852285] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3199.004003] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3199.019555] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3199.042869] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:26:56 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x0, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 3199.050476] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3199.060329] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3199.067344] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3199.069671] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3199.070894] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3199.072151] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3199.073684] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3199.075859] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3199.097923] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3199.105526] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3199.126055] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3199.127268] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3199.131198] blktrace: Concurrent blktraces are not allowed on sr0 22:27:42 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:27:42 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:27:42 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:27:42 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:27:42 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:27:42 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x0, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:27:42 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x6a1083e59260be9, 0x0) write(r1, &(0x7f0000000040)="b12fdf0faea4cc8ebb820af6468ddb973bd3073fbd51b69ccf57e70d467b6e49475f6bbb30c5a64cffcd14ea6d0fc1bc2a7ee11f3a86", 0x36) tee(r0, r0, 0x8000, 0x4) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000, 0x0, 0x1000000}) 22:27:42 executing program 4: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2893, &(0x7f0000000080)={0x0, 0xa, 0x7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0xf, 0x0, &(0x7f0000000440)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r5, 0x0, &(0x7f0000000300)="64f4e779eb00638dcfd03fd986a5dbb50bb0edfe76d26d65a6f004ef570943209d39be1b13959083db23baa919a2fd9514ae19c5ef21afc20ac88d4ecfdee8ccdfd517730d4531c08cde4dc06f582187e8fd3511638af1012e42fb20af7be370d5a451f81c188e5d314832abd23282708c57d552f8e63a9e41065e856d8536e5e1968a9282a11449517b0d357b9a3420f036afa2f1c7601fcc1698032ef1c3f9496cb7a49ae4e9a3e58146974932d247e88dc5c8f9b2cb8f70133c200ab8754092f9d7c523e88b9496b2275baf1f59ca0a7c6aa9ee6f910038af3132ae4fe38292ad3951a033dfe9b5aed43d78a2b3c35c52", 0x13e, 0x20, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_WRITE={0x17, 0x1, 0x5bd750a42c9b21c7, @fd_index=0x6, 0x75c, &(0x7f0000000080)="c1f8e4a860d606813478ea8cbc78e87913c3f83836cf84f228ada0a6042e625f0f8b1a5753b19abda791de9e80c936604e4b40cebf1968053acda3c564abd28affba38248862cbcde748609322fc02ffc16372ea998d0f20e1cb66cc2b766722e45aa4e8c77faaf63b9c9f9d4794fbfe04677d5ee17c7e081921a762963c3e47ce7de53f41e909b0b53c0c327d987fd60e09a1116e4cf309221b74b1686b914d2f235ddf271db52c7a628ca7c5", 0xad, 0x0, 0xcb8364edf8bfc5a3}, 0x8000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {0x82}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0xffffffffffffff2a) [ 3199.137305] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3244.531841] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3244.540644] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3244.546461] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3244.549451] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3244.552224] bt_err_ratelimited: 1 callbacks suppressed [ 3244.552267] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3244.561262] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3244.588328] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3244.599078] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3244.605527] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3244.610487] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3244.612236] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3244.614773] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3244.617478] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3244.620081] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3244.621569] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3244.624370] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3244.628080] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3244.629858] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3244.630010] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3244.632348] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3244.635263] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3244.638895] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:27:42 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3244.648296] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3244.648517] blktrace: Concurrent blktraces are not allowed on sr0 [ 3244.650887] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3244.652407] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:27:42 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:27:42 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0x0, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:27:42 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:27:42 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3244.672635] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3244.941929] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3244.983300] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3244.985192] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3244.986654] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3244.988038] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3244.989450] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3245.005874] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3245.008306] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3245.010310] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3245.011621] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3245.013255] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3245.013489] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3245.020686] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3245.024424] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3245.026880] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3245.028444] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3245.031399] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3245.107928] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3245.110437] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3245.112070] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3245.150302] blktrace: Concurrent blktraces are not allowed on sr0 [ 3245.176354] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3245.182667] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3245.195206] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3245.196646] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:28:06 executing program 4: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) syz_io_uring_complete(0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000180), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0f0e0100"], 0x4) 22:28:06 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:28:06 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x40000, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0xfff6, 0x40, 0xa34f, 0xd4, 0x7be, 0x402}) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 22:28:07 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0x0, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:28:07 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x0, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:28:07 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:28:07 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:28:07 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3269.203600] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3269.205064] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3269.207049] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3269.207777] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:28:07 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:28:07 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10004}) [ 3269.292926] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3269.293649] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3269.298508] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3269.299186] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3269.300835] bt_err_ratelimited: 2 callbacks suppressed [ 3269.300858] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3269.302237] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3269.311531] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3269.312857] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3269.316876] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3269.317527] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3269.325638] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3269.325765] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3269.332752] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3269.335275] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3269.344093] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3269.344697] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3269.345521] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3269.365197] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3269.371267] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3269.377275] audit: type=1400 audit(1732832887.216:10): avc: denied { block_suspend } for pid=15917 comm="syz-executor.4" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 3269.390525] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3269.391602] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:28:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04010100"], 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x57}, {0x8, 0xe, [{0xc9, 0x40, 0x1}, {0x11066ddafffb18ce, 0x73d, 0x20}, {0xc8, 0x7, 0x2}, {0xc9, 0x954, 0x6}, {0xc9, 0x7, 0xa0}, {0xc8, 0x7, 0x3}, {0xc9, 0x3c, 0x9a4}, {0xc8, 0x1, 0x5}, {0xc9, 0x81, 0x5}, {0xc9, 0x6, 0x7}, {0xc8, 0x20, 0xa243}, {0xc8, 0x3, 0x1}, {0xc8, 0x6, 0x7}, {0xc9, 0x9, 0xfff}]}}}, 0x5a) [ 3269.396349] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3269.433303] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3269.436489] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3269.437684] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3269.442891] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:28:07 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0x0, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:28:07 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x0, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:28:07 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:28:07 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 3269.511460] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3269.512784] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3269.515390] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3269.516243] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3269.518746] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3269.519477] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3269.534169] blktrace: Concurrent blktraces are not allowed on sr0 22:28:07 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x0, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:28:07 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3269.616666] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3269.621197] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3269.622430] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3269.624561] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:28:07 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$setstatus(r1, 0x4, 0x0) 22:28:07 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x0, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 3269.627153] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3269.698683] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3269.700910] blktrace: Concurrent blktraces are not allowed on sr0 [ 3269.702032] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3269.704276] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3269.705073] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3269.707905] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3269.728987] blktrace: Concurrent blktraces are not allowed on sr0 22:28:07 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x0, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:28:07 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:28:07 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000, 0x0, 0x4}) [ 3269.806222] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3269.807456] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3269.808700] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3269.815855] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3269.817637] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3269.818568] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3269.823076] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3269.824772] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:28:07 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 3269.904160] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3269.913077] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3269.916244] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3269.923319] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3269.925215] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3269.927740] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3269.936464] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3269.937476] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3269.982231] blktrace: Concurrent blktraces are not allowed on sr0 [ 3269.998371] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3269.999642] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3270.003292] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3270.004537] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:28:07 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x0, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3270.127031] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3270.132233] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3270.133583] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3270.135176] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3270.229033] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3270.232370] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3270.247498] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3270.248454] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:28:30 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x0, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:28:30 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:28:30 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x0, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:28:30 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:28:30 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000080)={0x8, 0x3f}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000100)={{'\x00', 0x2}, {0x10001}, 0x4, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000480)="ec1e9bff5f676690b1a5ce7a64fa071ef19e97d7482cc16c01d7fb2e3d274c60fb818fe58f1784f9b80967007b63ce7c3b8b420fe8bdcfc0cb55e0fa404354cfc666dbfb62d15dc0fe41034b31d05dbacdb17a9df0baae2e4a14a2c9a4922c245fea0ba20951924c4219c7c3679e0c3794910ffc230f7ff21028d2d4c4041bc1694f840a46a3e7d9b524bae3", 0x8c, 0x0, &(0x7f0000000280)={0x2, 0xf7, {0x1, 0xc, 0x0, "", 0xea, "b92da4a9565f578f044e6c9ba82a542baf2ab5817d36b1751ecfe85300ccebd51c90a7e72c48f80c3af068799c94e34f185b92ecd11278adff0964029aafcf771fd264611db21635aaa64182a6ef67e03fb38d770e1542d34ad99ef50e6f04810b9abcd96e1549b8f89db107c6c9ea9e0359f36d1444501bffb6633f002d9c1829f6793ebe5e69e8a2f3907129c62454d905d9aa9859d2d6b4f8998d3154f2509e307b2904f5d694e4cdde9f3e90d995284b9861c15d1128ab3efe7703e9eb0fc4804ce168db5a6f5c98341c51c8cb907afa85d2fefdca6a971053b33840c881f8f7205cf4e5bd8973b5"}, 0xd7, "cec4c6833c231dd18a3b71c4dd9b3aa2e859feaaddd41646057dee76355a1093e6c3cfa465a40cf6b1982074c7a60e19068eb493b5b85b3ce75cb5740e9d0377d16317a501040e758f77cf50ba3154780c7fd26ec2fe894e2ef5a4ec9bb430b15f30c54083aa44ae7d66916f5578fea9cb117929821af9a30b1f8d436cef2f2f32dbe1b9a344ccbb6efc3edd820723f24b0b025f10435178654efe07d39f993a39eb8528da5f47b8321c7310abc9f29d3c9a56d34d52f18c7ee749b0267682943a1098630d1535c0bad7786a3f3750d42e2e4fcdcda611"}, 0x1da}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:28:30 executing program 5: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000}) syz_io_uring_complete(0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000180), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0f0e0100"], 0x4) 22:28:30 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x0, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3293.125197] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3293.125819] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3293.128228] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3293.129920] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3293.131255] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3293.131880] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3293.133778] bt_err_ratelimited: 9 callbacks suppressed [ 3293.133801] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3293.135311] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3293.140331] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3293.141783] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3293.156216] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3293.170387] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3293.202206] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3293.203491] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3293.217979] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3293.218603] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3293.230322] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3293.236655] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3293.248707] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3293.249728] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:28:31 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x0, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3293.267621] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3293.315364] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3293.316653] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3293.330328] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3293.331078] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:28:31 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x6a1083e59260be9, 0x0) write(r1, &(0x7f0000000040)="b12fdf0faea4cc8ebb820af6468ddb973bd3073fbd51b69ccf57e70d467b6e49475f6bbb30c5a64cffcd14ea6d0fc1bc2a7ee11f3a86", 0x36) tee(r0, r0, 0x8000, 0x4) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000, 0x0, 0x1000000}) 22:28:31 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 3293.337369] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3293.542427] blktrace: Concurrent blktraces are not allowed on sr0 [ 3293.545050] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3293.557740] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3293.565859] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3293.569222] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3293.575963] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3293.581161] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3293.585974] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:28:31 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3293.591153] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3293.593557] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3293.599068] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3293.716268] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3293.718151] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3293.722469] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3293.725124] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3293.726599] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:28:53 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x0, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:28:53 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:28:53 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x0, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:28:53 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', r2, 0x2f, 0xad, 0x9, 0x3, 0x8, @remote, @private0, 0x40, 0x8000, 0x575c, 0x3}}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf250300000008000b00", @ANYRES32=r3, @ANYBLOB="06000a004e210000040005000500040001000300050002000200000014000700fe880000000000000000000000000101"], 0x4c}}, 0x480c4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xc0000000}) 22:28:53 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) flock(r1, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:28:53 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x0, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:28:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:28:53 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x6a1083e59260be9, 0x0) write(r1, &(0x7f0000000040)="b12fdf0faea4cc8ebb820af6468ddb973bd3073fbd51b69ccf57e70d467b6e49475f6bbb30c5a64cffcd14ea6d0fc1bc2a7ee11f3a86", 0x36) tee(r0, r0, 0x8000, 0x4) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000, 0x0, 0x1000000}) [ 3293.729329] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3315.941169] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3315.949161] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3315.951870] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3315.954294] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3315.959569] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3315.963385] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3315.970786] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3315.971874] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3315.974285] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3315.976412] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3315.978602] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3315.994883] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3315.996167] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3316.003262] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3316.006445] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3316.008533] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3316.011082] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3316.011253] blktrace: Concurrent blktraces are not allowed on sr0 [ 3316.019777] blktrace: Concurrent blktraces are not allowed on sr0 [ 3316.024767] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3316.029679] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3316.034719] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3316.044601] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3316.046157] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3316.053336] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:28:53 executing program 4: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) recvmmsg$unix(r0, &(0x7f0000002280)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/12, 0xc}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/40, 0x28}, {&(0x7f0000000840)=""/132, 0x84}], 0x4, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/248, 0xf8}, {&(0x7f0000000b40)=""/88, 0x58}], 0x2, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x168}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000002140)=[{&(0x7f0000000e00)=""/197, 0xc5}, {&(0x7f0000000f00)=""/118, 0x76}, {&(0x7f0000000f80)=""/93, 0x5d}, {&(0x7f0000001000)=""/170, 0xaa}, {&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/32, 0x20}], 0x7, &(0x7f00000021c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}], 0x4, 0x10000, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) [ 3316.053762] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3316.058814] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3316.062650] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3316.088495] blktrace: Concurrent blktraces are not allowed on sr0 22:28:53 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x0, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:28:54 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 3316.254842] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3316.256039] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3316.259433] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3316.260503] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:28:54 executing program 4: msgget$private(0x0, 0x400) rt_sigaction(0xa, &(0x7f0000000500)={0x0, 0x118000004, 0x0, {[0x6d5]}}, 0x0, 0x8, &(0x7f0000000040)) 22:28:54 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x0, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3316.409024] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3316.410411] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3316.411762] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3316.413077] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3316.455997] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3316.457330] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3316.458626] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3316.460011] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3316.461520] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:28:54 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x0, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:28:54 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:28:54 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 3316.461749] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3316.473833] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3316.483333] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3316.489001] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3316.532254] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3316.564267] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3316.576149] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3316.580240] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3316.582397] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3316.590065] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3316.592320] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3316.641309] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3316.659571] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3316.661863] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3316.662803] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3340.587034] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3340.588825] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3340.594053] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3340.595031] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3340.596196] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3340.597193] Bluetooth: hci3: ACL packet for unknown connection handle 200 22:29:18 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x6a1083e59260be9, 0x0) write(r1, &(0x7f0000000040)="b12fdf0faea4cc8ebb820af6468ddb973bd3073fbd51b69ccf57e70d467b6e49475f6bbb30c5a64cffcd14ea6d0fc1bc2a7ee11f3a86", 0x36) tee(r0, r0, 0x8000, 0x4) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000, 0x0, 0x1000000}) 22:29:18 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x0, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:29:18 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:29:18 executing program 6: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000a06050000000000000900020073797a30000000000900020073797a310000000000000000000000fa44952f5b1f696be6572d47f73e3d48b00ba4e23dbe047ae3d3eb9a18eb9af6ee57095db4af18af500857b98323fe679cc09864e681b5df3c63000c3aaea999df28e7c5017e630024a6a26ee270eb722f55e05e29dbe3db"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000440)) read(r0, &(0x7f0000000000)=""/188, 0xbc) 22:29:18 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x0, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:29:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x99b, 0x1, 0x3}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) 22:29:18 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:29:18 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3340.615860] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3340.617191] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3340.618091] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3340.618898] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3340.620244] bt_err_ratelimited: 2 callbacks suppressed [ 3340.620273] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3340.621071] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3340.623223] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3340.625111] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3340.627786] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3340.635177] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3340.636297] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3340.639260] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3340.640174] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3340.642716] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3340.644369] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:29:18 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x0, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3340.651227] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3340.707574] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3340.716590] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3340.718485] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3340.719322] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3340.720356] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3340.725487] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3340.739123] blktrace: Concurrent blktraces are not allowed on sr0 [ 3340.807195] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3340.808485] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3340.811199] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3340.817237] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:29:46 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:29:46 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x0, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:29:46 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000080)={0x8, 0x3f}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000100)={{'\x00', 0x2}, {0x10001}, 0x4, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000480)="ec1e9bff5f676690b1a5ce7a64fa071ef19e97d7482cc16c01d7fb2e3d274c60fb818fe58f1784f9b80967007b63ce7c3b8b420fe8bdcfc0cb55e0fa404354cfc666dbfb62d15dc0fe41034b31d05dbacdb17a9df0baae2e4a14a2c9a4922c245fea0ba20951924c4219c7c3679e0c3794910ffc230f7ff21028d2d4c4041bc1694f840a46a3e7d9b524bae3", 0x8c, 0x0, &(0x7f0000000280)={0x2, 0xf7, {0x1, 0xc, 0x0, "", 0xea, "b92da4a9565f578f044e6c9ba82a542baf2ab5817d36b1751ecfe85300ccebd51c90a7e72c48f80c3af068799c94e34f185b92ecd11278adff0964029aafcf771fd264611db21635aaa64182a6ef67e03fb38d770e1542d34ad99ef50e6f04810b9abcd96e1549b8f89db107c6c9ea9e0359f36d1444501bffb6633f002d9c1829f6793ebe5e69e8a2f3907129c62454d905d9aa9859d2d6b4f8998d3154f2509e307b2904f5d694e4cdde9f3e90d995284b9861c15d1128ab3efe7703e9eb0fc4804ce168db5a6f5c98341c51c8cb907afa85d2fefdca6a971053b33840c881f8f7205cf4e5bd8973b5"}, 0xd7, "cec4c6833c231dd18a3b71c4dd9b3aa2e859feaaddd41646057dee76355a1093e6c3cfa465a40cf6b1982074c7a60e19068eb493b5b85b3ce75cb5740e9d0377d16317a501040e758f77cf50ba3154780c7fd26ec2fe894e2ef5a4ec9bb430b15f30c54083aa44ae7d66916f5578fea9cb117929821af9a30b1f8d436cef2f2f32dbe1b9a344ccbb6efc3edd820723f24b0b025f10435178654efe07d39f993a39eb8528da5f47b8321c7310abc9f29d3c9a56d34d52f18c7ee749b0267682943a1098630d1535c0bad7786a3f3750d42e2e4fcdcda611"}, 0x1da}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:29:46 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:29:46 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:29:46 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x58}, @l2cap_cid_signaling={{0x54}, [@l2cap_conf_req={{0x4, 0x3, 0x27}, {0x100, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x3}, @l2cap_conf_flushto={0x2, 0x2, 0x9}, @l2cap_conf_mtu={0x1, 0x2, 0xffff}, @l2cap_conf_flushto={0x2, 0x2, 0xf0}, @l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_mtu={0x1, 0x2, 0x401}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xff, 0x1f, 0x4c, 0x7fff, 0x698}}]}}, @l2cap_conf_req={{0x4, 0x6f, 0x25}, {0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x80, 0xe0, 0x4, 0x1, 0xdc1}}, @l2cap_conf_efs={0x6, 0x10, {0x6c, 0x0, 0x9, 0x10000, 0x7ff, 0x1}}]}}]}}, 0x5d) 22:29:46 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x0, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:29:46 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000080), 0x0) timer_create(0x0, 0x0, 0x0) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f00000005c0)={0x81, 0x81, 0xfa, 0x1, 0x0, 0x9}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000039e4e5392b177eec", @ANYRES32=r1, @ANYBLOB="04000000000000002e2f66696c653000"]) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in=@multicast2}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8) stat(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) openat$incfs(r4, &(0x7f0000000040)='.log\x00', 0x200801, 0x23) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0xf, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0x44f7, &(0x7f0000001040)={0x0, 0xfd5f, 0x4, 0x1, 0x36d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000010c0), &(0x7f0000001100)) pwrite64(r5, &(0x7f0000000280)="d2aa452e50b9239a9858f834e7d752bea999fd31d4d971f287fd9b94b17edfa2aab81a5194d5dfd8ddd7266cdfd6acee674cddb45764f8814a8598c7a817d1347feb50677060b3f8238898c951c832b9e65e7472f5fb19bb04dcd05f43b9a699587cf36b85e3fa2e61ef4eaaca02f516b22a", 0x72, 0x8) fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:pam_console_exec_t:s0\x00', 0x28, 0x0) [ 3368.722072] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3368.723449] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3368.726973] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3368.728304] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3368.729897] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3368.730190] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3368.731525] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3368.734081] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3368.735390] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3368.736703] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3368.738322] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3368.742377] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3368.789984] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3368.820007] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3368.820743] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:29:46 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:29:46 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3368.942414] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3368.942539] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3368.943096] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3368.943177] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3368.944505] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3368.945044] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3368.946279] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3368.946969] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3368.948041] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3368.948599] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3368.950004] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3368.950502] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3368.951442] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3368.951854] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3368.954366] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3368.955167] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3368.955583] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3368.964689] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:29:46 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3368.987534] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3368.988375] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3368.992385] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:29:46 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:29:46 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000080)={0x8, 0x3f}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000100)={{'\x00', 0x2}, {0x10001}, 0x4, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000480)="ec1e9bff5f676690b1a5ce7a64fa071ef19e97d7482cc16c01d7fb2e3d274c60fb818fe58f1784f9b80967007b63ce7c3b8b420fe8bdcfc0cb55e0fa404354cfc666dbfb62d15dc0fe41034b31d05dbacdb17a9df0baae2e4a14a2c9a4922c245fea0ba20951924c4219c7c3679e0c3794910ffc230f7ff21028d2d4c4041bc1694f840a46a3e7d9b524bae3", 0x8c, 0x0, &(0x7f0000000280)={0x2, 0xf7, {0x1, 0xc, 0x0, "", 0xea, "b92da4a9565f578f044e6c9ba82a542baf2ab5817d36b1751ecfe85300ccebd51c90a7e72c48f80c3af068799c94e34f185b92ecd11278adff0964029aafcf771fd264611db21635aaa64182a6ef67e03fb38d770e1542d34ad99ef50e6f04810b9abcd96e1549b8f89db107c6c9ea9e0359f36d1444501bffb6633f002d9c1829f6793ebe5e69e8a2f3907129c62454d905d9aa9859d2d6b4f8998d3154f2509e307b2904f5d694e4cdde9f3e90d995284b9861c15d1128ab3efe7703e9eb0fc4804ce168db5a6f5c98341c51c8cb907afa85d2fefdca6a971053b33840c881f8f7205cf4e5bd8973b5"}, 0xd7, "cec4c6833c231dd18a3b71c4dd9b3aa2e859feaaddd41646057dee76355a1093e6c3cfa465a40cf6b1982074c7a60e19068eb493b5b85b3ce75cb5740e9d0377d16317a501040e758f77cf50ba3154780c7fd26ec2fe894e2ef5a4ec9bb430b15f30c54083aa44ae7d66916f5578fea9cb117929821af9a30b1f8d436cef2f2f32dbe1b9a344ccbb6efc3edd820723f24b0b025f10435178654efe07d39f993a39eb8528da5f47b8321c7310abc9f29d3c9a56d34d52f18c7ee749b0267682943a1098630d1535c0bad7786a3f3750d42e2e4fcdcda611"}, 0x1da}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:29:46 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:29:46 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0x0, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 3368.992957] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3369.073361] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 22:29:46 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:29:46 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa9}, "f8369970076513f164279021146595a147b708c470283a79383211480ed7dad7c0b0352216fa783d2caca8bb20d4225ad37f112cd2894625cb796df759a3baef7c8d5b1371f5e9166c46b875bf2468fe340cda1d436f3bc409d6581b067f30adfc099024a4788e542f45fc9bddf022654a0e9ee64b4fdd86f894dfc37c275bce0b8db1a379a69bb834e626a1a45e71e98641ce7b765246e177865bc66023b375a918c8f2de3f489037"}, 0xad) [ 3369.143838] blktrace: Concurrent blktraces are not allowed on sr0 [ 3369.155599] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3369.158486] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3369.161575] audit: type=1400 audit(1732832987.017:11): avc: denied { associate } for pid=16082 comm="syz-executor.6" name="sr0" dev="devtmpfs" ino=116 scontext=system_u:object_r:pam_console_exec_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 3369.162464] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3369.169283] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:29:47 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3369.172187] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3369.254217] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3369.261349] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3369.268178] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3369.268988] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3369.307349] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 3369.315445] blktrace: Concurrent blktraces are not allowed on sr0 [ 3369.326975] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3369.327856] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3369.334285] audit: type=1400 audit(1732832987.190:12): avc: denied { relabelto } for pid=16082 comm="syz-executor.6" name="RAW" dev="sockfs" ino=33027 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:pam_console_exec_t:s0 tclass=rawip_socket permissive=1 [ 3369.337291] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3369.338390] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3369.340173] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3369.346793] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3369.348303] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3369.350385] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3369.353862] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3369.354870] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3369.357897] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3369.364840] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3369.370273] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3369.372682] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3369.378223] blktrace: Concurrent blktraces are not allowed on sr0 [ 3369.379707] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:29:47 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3369.395708] Bluetooth: hci0: ACL packet for unknown connection handle 201 22:29:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000040)="b4ee4f99592ed1f5102e165357b926b81b79fc4bbb508561f08b1251aae76e84f0c8c64d35bcf4d7be18064f93509c2f13a45c6da0462f9f0e185e047a89f8fe88b71b770ecd983c8289ebfee66f3dba6e0970b9ec31745a912abb921c87a8c72edae5bcaaa7480dc32207f244ab6aa2296679195d2adb9dd0a3e12b0f188710e48b28fbb78b2d34b619d39ecbe5ce45eb51cb527b22e6ccdfaaf583129ed2ed581ed75041e6f562130c98963aeaccec144b73ee6bef817d393a61cd2be12617a192b4cbbabe") syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) 22:29:47 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:29:47 executing program 6: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:29:47 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 3369.574297] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3369.575662] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3369.576959] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3369.578161] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:29:47 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 3369.658116] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3369.663442] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3369.666882] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3369.668681] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3369.679408] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3369.680701] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3369.687303] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3369.696072] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3369.752741] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3369.754166] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3369.755749] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3369.757233] Bluetooth: hci4: ACL packet for unknown connection handle 201 22:30:07 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x3, 0x23, 0xfff, 0x0, 0x6}) 22:30:07 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000080)={0x8, 0x3f}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000100)={{'\x00', 0x2}, {0x10001}, 0x4, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000480)="ec1e9bff5f676690b1a5ce7a64fa071ef19e97d7482cc16c01d7fb2e3d274c60fb818fe58f1784f9b80967007b63ce7c3b8b420fe8bdcfc0cb55e0fa404354cfc666dbfb62d15dc0fe41034b31d05dbacdb17a9df0baae2e4a14a2c9a4922c245fea0ba20951924c4219c7c3679e0c3794910ffc230f7ff21028d2d4c4041bc1694f840a46a3e7d9b524bae3", 0x8c, 0x0, &(0x7f0000000280)={0x2, 0xf7, {0x1, 0xc, 0x0, "", 0xea, "b92da4a9565f578f044e6c9ba82a542baf2ab5817d36b1751ecfe85300ccebd51c90a7e72c48f80c3af068799c94e34f185b92ecd11278adff0964029aafcf771fd264611db21635aaa64182a6ef67e03fb38d770e1542d34ad99ef50e6f04810b9abcd96e1549b8f89db107c6c9ea9e0359f36d1444501bffb6633f002d9c1829f6793ebe5e69e8a2f3907129c62454d905d9aa9859d2d6b4f8998d3154f2509e307b2904f5d694e4cdde9f3e90d995284b9861c15d1128ab3efe7703e9eb0fc4804ce168db5a6f5c98341c51c8cb907afa85d2fefdca6a971053b33840c881f8f7205cf4e5bd8973b5"}, 0xd7, "cec4c6833c231dd18a3b71c4dd9b3aa2e859feaaddd41646057dee76355a1093e6c3cfa465a40cf6b1982074c7a60e19068eb493b5b85b3ce75cb5740e9d0377d16317a501040e758f77cf50ba3154780c7fd26ec2fe894e2ef5a4ec9bb430b15f30c54083aa44ae7d66916f5578fea9cb117929821af9a30b1f8d436cef2f2f32dbe1b9a344ccbb6efc3edd820723f24b0b025f10435178654efe07d39f993a39eb8528da5f47b8321c7310abc9f29d3c9a56d34d52f18c7ee749b0267682943a1098630d1535c0bad7786a3f3750d42e2e4fcdcda611"}, 0x1da}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:30:07 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:30:07 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 22:30:07 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:30:07 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:30:07 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0xa1b, 0x70bd29, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40850}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc8}, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) 22:30:07 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3390.233014] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3390.233687] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3390.234391] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3390.235124] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3390.235876] bt_err_ratelimited: 13 callbacks suppressed [ 3390.235900] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3390.237491] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3390.238309] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3390.240104] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3390.241349] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3390.242278] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3390.243239] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3390.247812] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3390.248796] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3390.252354] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3390.254140] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3390.257354] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3390.260100] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3390.263141] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3390.265495] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3390.266401] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3390.274573] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3390.275687] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:30:08 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x0, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3390.286306] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3390.287176] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3390.289585] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3390.292189] blktrace: Concurrent blktraces are not allowed on sr0 [ 3390.295086] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3390.295609] blktrace: Concurrent blktraces are not allowed on sr0 [ 3390.472625] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3390.474791] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3390.489015] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3390.489724] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3390.497460] Bluetooth: hci5: SCO packet for unknown connection handle 200 22:30:28 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x9, 0x8000, 0x6, 0x5}}}, 0xa) 22:30:28 executing program 6: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) 22:30:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x0, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) 22:30:28 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000080)={0x8, 0x3f}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x23, 0x10000}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:30:28 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) 22:30:28 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:30:28 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:30:28 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 3390.500575] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3410.338134] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3410.343573] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3410.345137] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3410.347093] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3410.350468] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3410.351126] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3410.364006] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3410.372138] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3410.373873] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3410.379149] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3410.380656] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3410.389643] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 3410.411932] Bluetooth: hci4: ACL packet for unknown connection handle 200 22:30:28 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3410.418496] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3410.420821] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3410.422725] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3410.431695] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3410.432356] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3410.434348] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3410.435165] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3410.444415] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3410.453033] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3410.465007] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3410.479409] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3410.480583] Bluetooth: hci3: ACL packet for unknown connection handle 201 22:30:28 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = getpid() pidfd_open(r1, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xdcac, 0x10000, 0x0, 0x0, r1}) r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x8, &(0x7f0000001500)=[{&(0x7f0000000080)="c7822a66cbf9a0c1594c14281257c643a207ee7dcbed6293e7cc9e090300"/39, 0x27, 0x3}, {&(0x7f00000000c0)="383e6d2df6924a04aec24ace1a19c1897c5caf152a39a83639b88feb41ac1e1d366892c32e3037e9e08324c8c497705e94ab21d8fd556c", 0x37, 0x4}, {&(0x7f0000000100)="f601f71bcef143698cb9c51b434583c9c98ffe4e8c2ba95803b2bcee458dbdfd07b7847520ff49e6d1a964445de83a", 0x2f, 0x7}, {&(0x7f0000000280)="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", 0x1000, 0x8}, {&(0x7f0000000140)="ba2a896eba48c45d1671545fdc07af1259a5a42ff9026820c944734f69c760863baf4da8841e850bf8eca5", 0x2b, 0x1}, {&(0x7f0000001280)="f5bc13d4be78367e7a99730a96476446e1fc37905302ff5a61f79b3179a3c1c77bde4b194c13e5ebf17ab56137e171e980c86d8c5f530d2d1ad04a23c61fe5ea5ac7a71e91dce5655e23da9fdc180e08f25d909f38fc8d2224180f38c5de42d81a93f5b5c87a697133153191a2a9c0bba36f9b482c9929c5de79ad48f6e8726fb122c579f2432fe33fd3eb4fbfe03b28a69ef0c435", 0x95}, {&(0x7f0000001340)="b66c3b2a2adae5083ae67f7e4b146fb7ef10fafa6e0291d326fc0d0732c6abb21f283b46ee5dd67af1f7d0693f419bd25ae656d98ecac20fadda383da466525a310d7800ca18d9310f2b53030bedd83ee5dca17ba120fae04499a1324924c48840258c9ac9588006f43d60a4920641548730d68ccc7af0fe9937d0f2881ce418b47488b874b2a10845ff3e70d1135533f3e6dd2a8f5ce4da53bc2233dfb6f916d717f0762f0637a38d37de61f6d64c79c08e50b19d0c788ebd749510987db33a653d0c73c781637a31d729c88c4faef5cb95717519ca6187dec62f5bd9cc06e7474f6db73bce77c0aaca2d1254775db623a174ebdf32", 0xf6, 0x5}, {&(0x7f0000001440)="ffde251b69ac49d4b06d62cc6a6200721d7a02a8273cbf8847bcd1680cc8497c17202f79a4671ddfb4878e57c517b908d702cfd06ffd673742f796563eed049562e1c083388bc2288d848a1306b706d63ab7eaf5818c3c0336b12b787f63e024790339dc87a3dd35a108f33e33ce5543320b80b50b9979d62f6b7802bc5df5922ca580efa130b39d4532935669a0694886479e433de24301380fb77a995f", 0x9e, 0xaa0e}], 0x884, &(0x7f0000001740)=ANY=[@ANYBLOB='dmode=0x0000000000000001,overriderockperm,fowner<', @ANYRESDEC=0xee01, @ANYBLOB="807dfc844cd17dfb00e39e86222dd780b236e80216a80f514b644fa55e", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000001600), 0x1080, 0x0) sendfile(r2, r3, 0x0, 0x6) stat(&(0x7f00000015c0)='./file0\x00', &(0x7f00000016c0)) 22:30:28 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 22:30:28 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) [ 3410.486125] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3410.543978] Bluetooth: hci2: ACL packet for unknown connection handle 200 22:30:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x0, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT, 0x2) [ 3410.557244] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3410.568660] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3410.571176] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3410.601490] Bluetooth: hci2: SCO packet for unknown connection handle 200 22:30:28 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4) 22:30:28 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) 22:30:28 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000080)={0x8, 0x3f}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 22:30:28 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x0, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) [ 3410.616465] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3410.806981] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3410.808590] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3410.810948] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3410.811602] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3410.812401] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3410.812518] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3410.874133] Bluetooth: hci4: ACL packet for unknown connection handle 200 22:30:28 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3410.889883] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3410.903025] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3410.905018] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 3410.910463] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3410.916453] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3410.917595] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3410.926051] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3410.926862] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3410.929225] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 3410.937307] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3410.940181] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3410.987694] loop6: detected capacity change from 0 to 170 [ 3411.000134] iso9660: Unknown parameter 'fowner<00000000000000060929€}ü„LÑ}û' [ 3411.033291] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3411.035346] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3411.038431] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3411.039218] Bluetooth: hci2: ACL packet for unknown connection handle 201 22:30:28 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x12}, {0x800, 0x3, 0x5, 0x3, [0xff, 0x1, 0xaec, 0x2, 0x9]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x12}, {0x2, 0x6, 0x5, 0x8, [0x1, 0x2, 0x9, 0x80, 0x7]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x9c25f365e7af601d}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x79}, {0x8, [{@any, 0x0, 0x1f, 0xff, "4513f4", 0x7ff, 0x3f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0x6, 0x8, "b00061", 0x5, 0x81}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6f, 0x0, "f6ed7c", 0x7ff, 0x3}, {@any, 0x8, 0x8, 0x4, "4ffd4b", 0xfffb, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x80, 0x0, "f731f5", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x5, 0x0, "cb4d6d", 0x5, 0x8}, {@fixed, 0x0, 0x3c, 0xc1, "16b615", 0x8, 0x40}, {@none, 0xfa, 0x7, 0x6, "69c619", 0x5, 0x80}]}}}, 0x7c) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4d}, "b14c1c89dbb039b561def5387168e3355cf2e9136637d1b0479d39c0071c9ae5dd3ed84f5474836ba606a3fc361a676b60701267d63bbd2172a991850e7f9bb9328b140bd135dd788d20b1df03"}, 0x51) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "fc9851ab36aff5111e4fd6866611630ca74f67cb6482faa2b472084e656d4e7ffb5d72ed8e7789b1aaa48215106dc8e938feb206d5b0af2f93ab2774b7ae5d94c5c9a0d32ddabece74a11d18f3feb770c4d077f19308ac7338d325273ea83f7835c895d21506a3f64d5b03b5a8fc3dd5b8"}, 0x75) [ 3411.149344] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3411.150552] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3411.155547] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3411.156346] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3411.219508] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3411.220860] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3411.223117] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3411.225372] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 3411.685631] loop6: detected capacity change from 0 to 170 [ 3411.690188] iso9660: Unknown parameter 'fowner<00000000000000060929€}ü„LÑ}û' [ 3415.778257] syz-fuzzer invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 3415.780407] CPU: 1 UID: 0 PID: 259 Comm: syz-fuzzer Not tainted 6.12.0-next-20241128 #1 [ 3415.781661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3415.782909] Call Trace: [ 3415.783354] [ 3415.783748] dump_stack_lvl+0xfa/0x120 [ 3415.784466] dump_header+0x107/0x920 [ 3415.785129] ? srso_return_thunk+0x5/0x5f [ 3415.785891] oom_kill_process+0x278/0xa30 [ 3415.786610] ? oom_cpuset_eligible.isra.0+0x19b/0x2d0 [ 3415.787496] out_of_memory+0x1391/0x1690 [ 3415.788238] ? __pfx_out_of_memory+0x10/0x10 [ 3415.789003] ? lock_acquire+0x32/0xc0 [ 3415.789648] ? __alloc_pages_noprof+0xb3a/0x1f90 [ 3415.790464] __alloc_pages_noprof+0x19ca/0x1f90 [ 3415.791303] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 3415.792159] ? srso_return_thunk+0x5/0x5f [ 3415.792965] ? srso_return_thunk+0x5/0x5f [ 3415.793747] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3415.794605] ? srso_return_thunk+0x5/0x5f [ 3415.795344] ? policy_nodemask+0xeb/0x4e0 [ 3415.796096] alloc_pages_mpol_noprof+0xf2/0x330 [ 3415.796883] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 3415.797744] ? srso_return_thunk+0x5/0x5f [ 3415.798481] ? xas_load+0x67/0x4f0 [ 3415.799172] folio_alloc_noprof+0x21/0x70 [ 3415.799865] filemap_alloc_folio_noprof+0x378/0x410 [ 3415.800714] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 3415.801626] ? srso_return_thunk+0x5/0x5f [ 3415.802355] ? down_read+0xae/0x320 [ 3415.803034] ? filemap_fault+0x16ae/0x2c80 [ 3415.803813] __filemap_get_folio+0x315/0x810 [ 3415.804607] filemap_fault+0x19a7/0x2c80 [ 3415.805374] ? __pfx_filemap_fault+0x10/0x10 [ 3415.806177] ? __pfx_lock_release+0x10/0x10 [ 3415.806925] __do_fault+0x10d/0x480 [ 3415.807612] __handle_mm_fault+0x122b/0x2f50 [ 3415.808387] ? __pfx___handle_mm_fault+0x10/0x10 [ 3415.809219] ? lock_release+0x20f/0x6f0 [ 3415.809930] handle_mm_fault+0x2b4/0x6a0 [ 3415.810622] ? access_error+0x17d/0x380 [ 3415.811355] do_user_addr_fault+0x4fa/0xf40 [ 3415.812155] ? srso_return_thunk+0x5/0x5f [ 3415.812911] exc_page_fault+0x9c/0x1a0 [ 3415.813611] asm_exc_page_fault+0x26/0x30 [ 3415.814328] RIP: 0033:0x437a40 [ 3415.814886] Code: Unable to access opcode bytes at 0x437a16. [ 3415.815791] RSP: 002b:000000c0004d5e20 EFLAGS: 00010247 [ 3415.816644] RAX: 000000c000000900 RBX: 000000c0004d5e30 RCX: 0000000000000004 [ 3415.817748] RDX: 0000000000000001 RSI: 000000c0004d5e30 RDI: 0000000000000000 [ 3415.818850] RBP: 000000c0004d5e58 R08: 0000000000000000 R09: 0000000000000000 [ 3415.819966] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 3415.821057] R13: 0000000001240aa0 R14: 0000000000000000 R15: 0000000000000000 [ 3415.822209] [ 3415.822874] Mem-Info: [ 3415.823423] active_anon:10025 inactive_anon:34227 isolated_anon:21 [ 3415.823423] active_file:43 inactive_file:26 isolated_file:3 [ 3415.823423] unevictable:0 dirty:0 writeback:0 [ 3415.823423] slab_reclaimable:5230 slab_unreclaimable:49048 [ 3415.823423] mapped:69665 shmem:96 pagetables:1169 [ 3415.823423] sec_pagetables:0 bounce:0 [ 3415.823423] kernel_misc_reclaimable:0 [ 3415.823423] free:2328 free_pcp:0 free_cma:0 [ 3415.829019] Node 0 active_anon:40100kB inactive_anon:136908kB active_file:172kB inactive_file:104kB unevictable:0kB isolated(anon):84kB isolated(file):12kB mapped:278660kB dirty:0kB writeback:0kB shmem:384kB writeback_tmp:0kB kernel_stack:4448kB pagetables:4676kB sec_pagetables:0kB all_unreclaimable? no [ 3415.833087] Node 0 DMA free:4kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:0kB free_cma:0kB [ 3415.837033] lowmem_reserve[]: 0 1589 0 0 [ 3415.837835] Node 0 DMA32 free:8848kB boost:12484kB min:17560kB low:19184kB high:20808kB reserved_highatomic:0KB active_anon:40100kB inactive_anon:136908kB active_file:172kB inactive_file:104kB unevictable:0kB writepending:0kB present:2080640kB managed:1639524kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3415.842271] lowmem_reserve[]: 0 0 0 0 [ 3415.843107] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36kB [ 3415.845428] Node 0 DMA32: 2244*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8976kB [ 3415.847978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3415.849532] 179 total pagecache pages [ 3415.850210] 0 pages in swap cache [ 3415.850795] Free swap = 0kB [ 3415.851387] Total swap = 0kB [ 3415.851948] 524158 pages RAM [ 3415.852477] 0 pages HighMem/MovableOnly [ 3415.853179] 110437 pages reserved [ 3415.853761] Unreclaimable slab info: [ 3415.854723] Name Used Total [ 3415.855729] pid_2 37KB 37KB [ 3415.856651] IEEE-802.15.4-RAW 63KB 63KB [ 3415.857566] fib6_node 40KB 40KB [ 3415.858472] ip6_dst_cache 45KB 45KB [ 3415.859398] RAWv6 191KB 191KB [ 3415.860303] UDPLITEv6 30KB 30KB [ 3415.861208] UDPv6 61KB 61KB [ 3415.862120] TCPv6 238KB 238KB [ 3415.863027] scsi_sense_cache 4KB 4KB [ 3415.863951] virtio_scsi_cmd 16KB 16KB [ 3415.864822] bio-120 11KB 11KB [ 3415.865743] bio-248 3KB 3KB [ 3415.866657] mqueue_inode_cache 60KB 60KB [ 3415.867586] nfs_commit_data 15KB 15KB [ 3415.868494] nfs_write_data 47KB 47KB [ 3415.869448] jbd2_inode 7KB 7KB [ 3415.870360] ext4_system_zone 3KB 3KB [ 3415.875039] ext4_io_end_vec 7KB 7KB [ 3415.885577] kioctx 15KB 15KB [ 3415.886554] aio_kiocb 7KB 7KB [ 3415.887485] pid_namespace 7KB 7KB [ 3415.888388] posix_timers_cache 15KB 15KB [ 3415.889305] rpc_buffers 31KB 31KB [ 3415.890217] rpc_tasks 3KB 3KB [ 3415.891133] UNIX-STREAM 146KB 309KB [ 3415.892042] UNIX 162KB 247KB [ 3415.892956] UDP-Lite 31KB 31KB [ 3415.893818] tcp_bind2_bucket 8KB 8KB [ 3415.894722] tcp_bind_bucket 8KB 8KB [ 3415.895651] ip_fib_trie 8KB 8KB [ 3415.896566] ip_fib_alias 19KB 19KB [ 3415.897468] rtable 8KB 8KB [ 3415.898371] PING 30KB 30KB [ 3415.899281] RAW 60KB 60KB [ 3415.900188] UDP 136KB 223KB [ 3415.901095] request_sock_TCP 15KB 15KB [ 3415.902007] TCP 312KB 312KB [ 3415.902867] hugetlbfs_inode_cache 62KB 62KB [ 3415.903843] netfs_subrequest 33KB 33KB [ 3415.904758] netfs_request 94KB 94KB [ 3415.905665] bio-240 11KB 11KB [ 3415.906572] ep_head 8KB 8KB [ 3415.907486] eventpoll_pwq 23KB 23KB [ 3415.908390] eventpoll_epi 51KB 51KB [ 3415.909301] inotify_inode_mark 42KB 42KB [ 3415.910211] sgpool-128 59KB 59KB [ 3415.911127] sgpool-64 63KB 63KB [ 3415.912042] sgpool-32 78KB 78KB [ 3415.912947] sgpool-16 30KB 30KB [ 3415.913801] sgpool-8 33KB 33KB [ 3415.914707] request_queue 31KB 31KB [ 3415.915622] blkdev_ioc 8KB 8KB [ 3415.916537] bio-184 80KB 80KB [ 3415.917460] biovec-max 629KB 629KB [ 3415.918372] biovec-64 157KB 157KB [ 3415.919301] biovec-16 18KB 18KB [ 3415.920213] user_namespace 15KB 15KB [ 3415.921129] uid_cache 7KB 7KB [ 3415.922052] dmaengine-unmap-2 4KB 4KB [ 3415.922967] audit_buffer 7KB 7KB [ 3415.923859] skbuff_small_head 1389KB 1622KB [ 3415.924812] skbuff_fclone_cache 60KB 60KB [ 3415.926187] skbuff_head_cache 603KB 712KB [ 3415.927285] file_lock_cache 27KB 27KB [ 3415.928261] file_lock_ctx 7KB 7KB [ 3415.929175] fsnotify_mark_connector 19KB 19KB [ 3415.930173] taskstats 54KB 54KB [ 3415.931095] proc_dir_entry 382KB 393KB [ 3415.932018] pde_opener 7KB 7KB [ 3415.932884] seq_file 48KB 48KB [ 3415.933827] sigqueue 19KB 35KB [ 3415.934740] shmem_inode_cache 1363KB 1363KB [ 3415.935666] kernfs_iattrs_cache 273KB 273KB [ 3415.936602] kernfs_node_cache 5365KB 5382KB [ 3415.937516] mnt_cache 192KB 220KB [ 3415.938442] filp 1221KB 1504KB [ 3415.939367] names_cache 12728KB 13030KB [ 3415.940287] net_namespace 143KB 143KB [ 3415.941201] hashtab_node 278KB 278KB [ 3415.942116] ebitmap_node 1149KB 1149KB [ 3415.943030] avtab_node 4980KB 4980KB [ 3415.943963] avc_node 35KB 35KB [ 3415.944838] lsm_inode_cache 1675KB 1707KB [ 3415.945752] lsm_file_cache 95KB 116KB [ 3415.946668] key_jar 31KB 31KB [ 3415.947591] uts_namespace 15KB 15KB [ 3415.948502] nsproxy 7KB 7KB [ 3415.949450] vma_lock 658KB 1009KB [ 3415.950389] vm_area_struct 712KB 1027KB [ 3415.951317] fs_cache 40KB 40KB [ 3415.952229] files_cache 74KB 143KB [ 3415.953151] signal_cache 303KB 394KB [ 3415.954070] sighand_cache 390KB 481KB [ 3415.954996] task_struct 1127KB 1292KB [ 3415.955887] cred 79KB 124KB [ 3415.956838] anon_vma_chain 152KB 228KB [ 3415.957770] anon_vma 245KB 362KB [ 3415.958694] pid 58KB 78KB [ 3415.959629] Acpi-Operand 72KB 118KB [ 3415.960543] Acpi-ParseExt 35KB 35KB [ 3415.961489] Acpi-Parse 51KB 67KB [ 3415.962408] Acpi-State 31KB 51KB [ 3415.963337] Acpi-Namespace 24KB 24KB [ 3415.964256] numa_policy 3KB 3KB [ 3415.965173] perf_event 61KB 61KB [ 3415.966087] trace_event_file 212KB 212KB [ 3415.967000] ftrace_event_field 482KB 482KB [ 3415.967893] pool_workqueue 141KB 141KB [ 3415.968950] maple_node 292KB 1112KB [ 3415.969817] task_group 16KB 16KB [ 3415.970731] mm_struct 220KB 308KB [ 3415.971661] vmap_area 487KB 487KB [ 3415.972585] page->ptl 127KB 189KB [ 3415.977267] kmemleak_scan_area 227KB 227KB [ 3416.003806] kmemleak_object 90238KB 96166KB [ 3416.004782] kmalloc-cg-8k 64KB 64KB [ 3416.005703] kmalloc-cg-4k 1696KB 2176KB [ 3416.006618] kmalloc-cg-2k 2164KB 2240KB [ 3416.007544] kmalloc-cg-1k 530KB 544KB [ 3416.008456] kmalloc-cg-512 305KB 352KB [ 3416.009370] kmalloc-cg-256 80KB 80KB [ 3416.010288] kmalloc-cg-128 40KB 40KB [ 3416.011212] kmalloc-cg-64 24KB 24KB [ 3416.012125] kmalloc-cg-32 161KB 180KB [ 3416.013039] kmalloc-cg-16 8KB 8KB [ 3416.013949] kmalloc-cg-8 16KB 16KB [ 3416.014815] kmalloc-cg-192 48KB 48KB [ 3416.015745] kmalloc-cg-96 297KB 300KB [ 3416.016688] kmalloc-8k 2048KB 2176KB [ 3416.017605] kmalloc-4k 4152KB 4544KB [ 3416.018526] kmalloc-2k 2952KB 3552KB [ 3416.019451] kmalloc-1k 6228KB 6228KB [ 3416.020374] kmalloc-512 1756KB 1968KB [ 3416.021295] kmalloc-256 764KB 976KB [ 3416.022215] kmalloc-128 371KB 420KB [ 3416.023155] kmalloc-64 653KB 760KB [ 3416.024084] kmalloc-32 496KB 692KB [ 3416.025001] kmalloc-16 322KB 328KB [ 3416.025872] kmalloc-8 205KB 208KB [ 3416.026808] kmalloc-192 774KB 1008KB [ 3416.027746] kmalloc-96 704KB 996KB [ 3416.028656] kmem_cache_node 51KB 51KB [ 3416.029570] kmem_cache 82KB 82KB [ 3416.030477] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=259,uid=0 [ 3416.035359] Out of memory (oom_kill_allocating_task): Killed process 252 (syz-fuzzer) total-vm:1100244kB, anon-rss:141184kB, file-rss:56kB, shmem-rss:0kB, UID:0 pgtables:692kB oom_score_adj:0 [ 3416.486997] kworker/u9:2: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 3416.488236] CPU: 0 UID: 0 PID: 16207 Comm: kworker/u9:2 Not tainted 6.12.0-next-20241128 #1 [ 3416.488754] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 3416.488930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3416.488981] Workqueue: events_unbound cfg80211_wiphy_work [ 3416.490441] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 3416.491049] [ 3416.491060] Call Trace: [ 3416.491073] [ 3416.491097] dump_stack_lvl+0xfa/0x120 [ 3416.491785] node 0: slabs: 242, objs: 3326, free: 0 [ 3416.492491] warn_alloc+0x213/0x360 [ 3416.492542] ? __pfx_warn_alloc+0x10/0x10 [ 3416.492877] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 3416.492989] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 3416.493181] ? srso_return_thunk+0x5/0x5f [ 3416.493659] node 0: slabs: 242, objs: 3326, free: 0 [ 3416.494060] ? wakeup_kswapd+0x20d/0x5d0 [ 3416.494674] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 3416.494898] ? __pfx_get_page_from_freelist+0x10/0x10 [ 3416.494944] ? srso_return_thunk+0x5/0x5f [ 3416.496203] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 3416.496882] ? wake_all_kswapds+0x12d/0x2e0 [ 3416.497434] node 0: slabs: 242, objs: 3326, free: 0 [ 3416.497849] __alloc_pages_noprof+0x126f/0x1f90 [ 3416.498490] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 3416.499119] ? srso_return_thunk+0x5/0x5f [ 3416.499810] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 3416.500164] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 3416.501321] node 0: slabs: 242, objs: 3326, free: 0 [ 3416.501630] ? srso_return_thunk+0x5/0x5f [ 3416.502419] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 3416.502659] ? srso_return_thunk+0x5/0x5f [ 3416.503934] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 3416.504203] ? hlock_class+0x4e/0x130 [ 3416.505370] node 0: slabs: 242, objs: 3326, free: 0 [ 3416.505730] ? srso_return_thunk+0x5/0x5f [ 3416.506511] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 3416.506699] ? mark_lock+0xac/0x1370 [ 3416.507960] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 3416.508254] ? __pfx___lock_acquire+0x10/0x10 [ 3416.509422] node 0: slabs: 242, objs: 3326, free: 0 [ 3416.509690] ? srso_return_thunk+0x5/0x5f [ 3416.510478] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 3416.510660] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3416.511924] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 3416.512192] ? srso_return_thunk+0x5/0x5f [ 3416.513347] node 0: slabs: 242, objs: 3326, free: 0 [ 3416.513667] ? policy_nodemask+0xeb/0x4e0 [ 3416.514449] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 3416.514647] alloc_pages_mpol_noprof+0xf2/0x330 [ 3416.515932] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 3416.516273] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 3416.517424] node 0: slabs: 242, objs: 3326, free: 0 [ 3416.517722] ? lock_release+0x20f/0x6f0 [ 3416.522290] ? __pfx_lock_release+0x10/0x10 [ 3416.522687] alloc_slab_page+0xd5/0x100 [ 3416.523010] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 3416.523085] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 3416.523846] ? mark_held_locks+0x9e/0xe0 [ 3416.525005] node 0: slabs: 242, objs: 3326, free: 0 [ 3416.525296] new_slab+0x1fa/0x210 [ 3416.526283] ___slab_alloc+0x8a8/0x1200 [ 3416.526677] ? ieee802_11_parse_elems_full+0xec/0x15a0 [ 3416.527185] ? srso_return_thunk+0x5/0x5f [ 3416.527578] ? hlock_class+0x4e/0x130 [ 3416.527941] ? srso_return_thunk+0x5/0x5f [ 3416.528338] ? mark_lock+0xac/0x1370 [ 3416.528690] ? ieee802_11_parse_elems_full+0xec/0x15a0 [ 3416.528972] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 3416.529161] ? __kmalloc_noprof+0x297/0x4b0 [ 3416.530397] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 3416.530700] ? srso_return_thunk+0x5/0x5f [ 3416.531859] node 0: slabs: 242, objs: 3326, free: 0 [ 3416.532150] __kmalloc_noprof+0x297/0x4b0 [ 3416.533205] ? srso_untrain_ret+0x2/0x2 [ 3416.533588] ? mark_lock+0xac/0x1370 [ 3416.533940] ieee802_11_parse_elems_full+0xec/0x15a0 [ 3416.534412] ? __pfx_mark_lock+0x10/0x10 [ 3416.534782] ? hlock_class+0x4e/0x130 [ 3416.535151] ? srso_return_thunk+0x5/0x5f [ 3416.535550] ? srso_return_thunk+0x5/0x5f [ 3416.535945] ? hlock_class+0x4e/0x130 [ 3416.536311] ? srso_return_thunk+0x5/0x5f [ 3416.536704] ? mark_lock+0xac/0x1370 [ 3416.537054] ? srso_return_thunk+0x5/0x5f [ 3416.537447] ? mark_lock+0xac/0x1370 [ 3416.537796] ? __pfx_mark_lock+0x10/0x10 [ 3416.538177] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 3416.538679] ? srso_return_thunk+0x5/0x5f [ 3416.539072] ? mark_lock+0xac/0x1370 [ 3416.539420] ? srso_return_thunk+0x5/0x5f [ 3416.539812] ? __lock_acquire+0x17ec/0x4430 [ 3416.540208] ? __pfx_mark_lock+0x10/0x10 [ 3416.540584] ? srso_return_thunk+0x5/0x5f [ 3416.540979] ? hlock_class+0x4e/0x130 [ 3416.541344] ? srso_return_thunk+0x5/0x5f [ 3416.541735] ? __lock_acquire+0x17ec/0x4430 [ 3416.542135] ieee80211_ibss_rx_queued_mgmt+0xc84/0x2fa0 [ 3416.542628] ? srso_return_thunk+0x5/0x5f [ 3416.543028] ? hlock_class+0x4e/0x130 [ 3416.543403] ? srso_return_thunk+0x5/0x5f [ 3416.543800] ? mark_lock+0xac/0x1370 [ 3416.544167] ? __pfx___lock_acquire+0x10/0x10 [ 3416.544578] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 3416.545106] ? srso_return_thunk+0x5/0x5f [ 3416.545500] ? srso_return_thunk+0x5/0x5f [ 3416.545891] ? find_held_lock+0x2c/0x110 [ 3416.546277] ? kcov_remote_start+0x2bf/0x5b0 [ 3416.546674] ? srso_return_thunk+0x5/0x5f [ 3416.547070] ? lock_release+0x20f/0x6f0 [ 3416.547455] ? srso_return_thunk+0x5/0x5f [ 3416.547851] ? mark_held_locks+0x9e/0xe0 [ 3416.548225] ? srso_return_thunk+0x5/0x5f [ 3416.548616] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 3416.549080] ? srso_return_thunk+0x5/0x5f [ 3416.549485] ieee80211_iface_work+0xb5f/0xe40 [ 3416.549930] cfg80211_wiphy_work+0x340/0x470 [ 3416.550356] process_one_work+0x8ee/0x1a10 [ 3416.550787] ? __pfx_process_one_work+0x10/0x10 [ 3416.551229] ? srso_return_thunk+0x5/0x5f [ 3416.551624] ? move_linked_works+0x172/0x270 [ 3416.552059] ? srso_return_thunk+0x5/0x5f [ 3416.552452] ? assign_work+0x196/0x240 [ 3416.552828] worker_thread+0x674/0xe70 [ 3416.553205] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 3416.553680] ? srso_return_thunk+0x5/0x5f [ 3416.554077] ? __pfx_worker_thread+0x10/0x10 [ 3416.554494] kthread+0x2c2/0x3a0 [ 3416.554812] ? srso_return_thunk+0x5/0x5f [ 3416.555218] ? __pfx_kthread+0x10/0x10 [ 3416.555580] ret_from_fork+0x48/0x80 [ 3416.555942] ? __pfx_kthread+0x10/0x10 [ 3416.556300] ret_from_fork_asm+0x1a/0x30 [ 3416.556713] [ 3416.557085] Mem-Info: [ 3416.557313] active_anon:10013 inactive_anon:34241 isolated_anon:17 [ 3416.557313] active_file:36 inactive_file:33 isolated_file:1 [ 3416.557313] unevictable:0 dirty:0 writeback:0 [ 3416.557313] slab_reclaimable:5230 slab_unreclaimable:48647 [ 3416.557313] mapped:69634 shmem:96 pagetables:1169 [ 3416.557313] sec_pagetables:0 bounce:0 [ 3416.557313] kernel_misc_reclaimable:0 [ 3416.557313] free:108 free_pcp:813 free_cma:0 [ 3416.560345] Node 0 active_anon:40052kB inactive_anon:136964kB active_file:144kB inactive_file:132kB unevictable:0kB isolated(anon):68kB isolated(file):4kB mapped:278536kB dirty:0kB writeback:0kB shmem:384kB writeback_tmp:0kB kernel_stack:4160kB pagetables:4676kB sec_pagetables:0kB all_unreclaimable? yes [ 3416.562487] Node 0 DMA free:20kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3416.564575] lowmem_reserve[]: 0 1589 0 0 [ 3416.565032] Node 0 DMA32 free:412kB boost:0kB min:5076kB low:6700kB high:8324kB reserved_highatomic:8192KB active_anon:40052kB inactive_anon:136964kB active_file:144kB inactive_file:140kB unevictable:0kB writepending:0kB present:2080640kB managed:1639524kB mlocked:0kB bounce:0kB free_pcp:3252kB local_pcp:3092kB free_cma:0kB [ 3416.567383] lowmem_reserve[]: 0 0 0 0 [ 3416.567789] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 3416.569025] Node 0 DMA32: 33*4kB (M) 1*8kB (M) 2*16kB (M) 0*32kB 1*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 364kB [ 3416.570385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3416.571131] 161 total pagecache pages [ 3416.571462] 0 pages in swap cache [ 3416.571762] Free swap = 0kB [ 3416.572065] Total swap = 0kB [ 3416.572338] 524158 pages RAM [ 3416.572637] 0 pages HighMem/MovableOnly [ 3416.573009] 110437 pages reserved [ 3417.755450] oom_reaper: reaped process 16186 (syz-executor.6), now anon-rss:108kB, file-rss:34960kB, shmem-rss:0kB [ 3419.467024] sshd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=-1000 [ 3419.468099] CPU: 1 UID: 0 PID: 16219 Comm: sshd Not tainted 6.12.0-next-20241128 #1 [ 3419.468798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3419.469487] Call Trace: [ 3419.469730] [ 3419.469943] dump_stack_lvl+0xfa/0x120 [ 3419.470336] dump_header+0x107/0x920 [ 3419.470711] ? srso_return_thunk+0x5/0x5f [ 3419.471099] oom_kill_process+0x278/0xa30 [ 3419.471484] out_of_memory+0x34c/0x1690 [ 3419.471860] ? __pfx_out_of_memory+0x10/0x10 [ 3419.472254] ? lock_acquire+0x32/0xc0 [ 3419.472594] ? __alloc_pages_noprof+0xb3a/0x1f90 [ 3419.473015] __alloc_pages_noprof+0x19ca/0x1f90 [ 3419.473438] ? __pfx___lock_acquire+0x10/0x10 [ 3419.473825] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 3419.474265] ? find_held_lock+0x2c/0x110 [ 3419.474637] ? filemap_get_entry+0x1b2/0x3b0 [ 3419.475047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3419.475494] ? srso_return_thunk+0x5/0x5f [ 3419.475874] ? policy_nodemask+0xeb/0x4e0 [ 3419.476264] alloc_pages_mpol_noprof+0xf2/0x330 [ 3419.476673] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 3419.477116] ? filemap_get_entry+0x1bc/0x3b0 [ 3419.477516] ? __pfx_filemap_get_entry+0x10/0x10 [ 3419.477952] folio_alloc_mpol_noprof+0x38/0x90 [ 3419.478352] shmem_alloc_folio+0x11b/0x140 [ 3419.478724] shmem_get_folio_gfp.constprop.0+0x4eb/0x13a0 [ 3419.479224] ? __pfx___lock_acquire+0x10/0x10 [ 3419.479611] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 3419.480119] ? srso_return_thunk+0x5/0x5f [ 3419.480505] ? srso_return_thunk+0x5/0x5f [ 3419.480891] shmem_write_begin+0x148/0x2e0 [ 3419.481273] ? __pfx_shmem_write_begin+0x10/0x10 [ 3419.481696] ? srso_return_thunk+0x5/0x5f [ 3419.482083] generic_perform_write+0x284/0x7e0 [ 3419.482503] ? __pfx_generic_perform_write+0x10/0x10 [ 3419.482939] ? __mark_inode_dirty+0x663/0xd50 [ 3419.483349] ? srso_return_thunk+0x5/0x5f [ 3419.483725] ? generic_update_time+0xcb/0xf0 [ 3419.484115] ? srso_return_thunk+0x5/0x5f [ 3419.484491] ? mnt_put_write_access_file+0x45/0xe0 [ 3419.484914] shmem_file_write_iter+0x111/0x140 [ 3419.485363] vfs_write+0xbdb/0x10a0 [ 3419.485694] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 3419.486128] ? __pfx_vfs_write+0x10/0x10 [ 3419.486494] ? __pfx___do_sys_newfstat+0x10/0x10 [ 3419.486943] ksys_write+0x122/0x240 [ 3419.487279] ? __pfx_ksys_write+0x10/0x10 [ 3419.487641] ? srso_return_thunk+0x5/0x5f [ 3419.488036] do_syscall_64+0xbf/0x1d0 [ 3419.488400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3419.488846] RIP: 0033:0x7f6887aacf33 [ 3419.489174] Code: Unable to access opcode bytes at 0x7f6887aacf09. [ 3419.489662] RSP: 002b:00007ffe06c87468 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3419.490270] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f6887aacf33 [ 3419.490834] RDX: 0000000000000006 RSI: 0000563f2f2322d0 RDI: 0000000000000005 [ 3419.491403] RBP: 0000563f2f2322d0 R08: 0000000000000000 R09: 0000000000000006 [ 3419.491965] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000006 [ 3419.492526] R13: 0000563f2f219690 R14: 0000000000000006 R15: 00007f6887b7d8a0 [ 3419.493116] [ 3419.493389] Mem-Info: [ 3419.493607] active_anon:36 inactive_anon:7792 isolated_anon:0 [ 3419.493607] active_file:54 inactive_file:100 isolated_file:1 [ 3419.493607] unevictable:0 dirty:88 writeback:0 [ 3419.493607] slab_reclaimable:4163 slab_unreclaimable:44715 [ 3419.493607] mapped:8720 shmem:68 pagetables:520 [ 3419.493607] sec_pagetables:0 bounce:0 [ 3419.493607] kernel_misc_reclaimable:0 [ 3419.493607] free:1834 free_pcp:2 free_cma:0 [ 3419.496734] Node 0 active_anon:144kB inactive_anon:31168kB active_file:216kB inactive_file:400kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:34880kB dirty:352kB writeback:0kB shmem:272kB writeback_tmp:0kB kernel_stack:3680kB pagetables:2080kB sec_pagetables:0kB all_unreclaimable? no [ 3419.498869] Node 0 DMA free:72kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:84kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3419.500999] lowmem_reserve[]: 0 1589 0 0 [ 3419.501425] Node 0 DMA32 free:6500kB boost:0kB min:5076kB low:6700kB high:8324kB reserved_highatomic:0KB active_anon:144kB inactive_anon:31084kB active_file:216kB inactive_file:316kB unevictable:0kB writepending:352kB present:2080640kB managed:1639524kB mlocked:0kB bounce:0kB free_pcp:748kB local_pcp:0kB free_cma:0kB [ 3419.503709] lowmem_reserve[]: 0 0 0 0 [ 3419.504156] Node 0 DMA: 2*4kB (U) 2*8kB (U) 3*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 72kB [ 3419.505436] Node 0 DMA32: 1212*4kB (UME) 97*8kB (UME) 42*16kB (UME) 5*32kB (UE) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6520kB [ 3419.506889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3419.507644] 251 total pagecache pages [ 3419.508036] 0 pages in swap cache [ 3419.508342] Free swap = 0kB [ 3419.508614] Total swap = 0kB [ 3419.508888] 524158 pages RAM [ 3419.509212] 0 pages HighMem/MovableOnly [ 3419.509554] 110437 pages reserved [ 3419.509858] Unreclaimable slab info: [ 3419.510458] Name Used Total [ 3419.511020] pid_2 37KB 37KB [ 3419.511488] IEEE-802.15.4-RAW 63KB 63KB [ 3419.511978] fib6_node 40KB 40KB [ 3419.512432] ip6_dst_cache 45KB 45KB [ 3419.512891] RAWv6 191KB 191KB [ 3419.513395] UDPLITEv6 30KB 30KB [ 3419.513848] UDPv6 61KB 61KB [ 3419.514339] TCPv6 238KB 238KB [ 3419.514801] scsi_sense_cache 4KB 4KB [ 3419.515310] virtio_scsi_cmd 16KB 16KB [ 3419.515788] bio-120 11KB 11KB [ 3419.516288] bio-248 3KB 3KB [ 3419.516742] mqueue_inode_cache 60KB 60KB [ 3419.517235] nfs_commit_data 15KB 15KB [ 3419.517691] nfs_write_data 47KB 47KB [ 3419.518180] jbd2_inode 7KB 7KB [ 3419.518753] ext4_system_zone 3KB 3KB [ 3419.519359] ext4_io_end_vec 7KB 7KB [ 3419.519816] kioctx 15KB 15KB [ 3419.520304] aio_kiocb 7KB 7KB [ 3419.520853] pid_namespace 7KB 7KB [ 3419.521477] posix_timers_cache 15KB 15KB [ 3419.521972] rpc_buffers 31KB 31KB [ 3419.522429] rpc_tasks 3KB 3KB [ 3419.522882] UNIX-STREAM 251KB 309KB [ 3419.523398] UNIX 162KB 247KB [ 3419.523853] UDP-Lite 31KB 31KB [ 3419.524342] tcp_bind2_bucket 8KB 8KB [ 3419.524796] tcp_bind_bucket 8KB 8KB [ 3419.525287] ip_fib_trie 8KB 8KB [ 3419.525744] ip_fib_alias 19KB 19KB [ 3419.526343] rtable 8KB 8KB [ 3419.527010] PING 30KB 30KB [ 3419.527473] RAW 60KB 60KB [ 3419.527961] UDP 136KB 223KB [ 3419.528472] tw_sock_TCP 7KB 7KB [ 3419.529093] request_sock_TCP 15KB 15KB [ 3419.529552] TCP 165KB 281KB [ 3419.530049] hugetlbfs_inode_cache 62KB 62KB [ 3419.530536] netfs_subrequest 33KB 33KB [ 3419.531033] netfs_request 94KB 94KB [ 3419.531507] bio-240 11KB 11KB [ 3419.532005] ep_head 8KB 8KB [ 3419.532596] eventpoll_pwq 23KB 23KB [ 3419.533210] eventpoll_epi 51KB 51KB [ 3419.533681] inotify_inode_mark 42KB 42KB [ 3419.534181] sgpool-128 59KB 59KB [ 3419.534769] sgpool-64 95KB 95KB [ 3419.535396] sgpool-32 236KB 236KB [ 3419.535867] sgpool-16 67KB 67KB [ 3419.536419] sgpool-8 41KB 41KB [ 3419.537057] request_queue 31KB 31KB [ 3419.537523] blkdev_ioc 8KB 8KB [ 3419.538112] bio-184 236KB 236KB [ 3419.538720] biovec-max 446KB 446KB [ 3419.539224] biovec-64 330KB 330KB [ 3419.539752] biovec-16 33KB 33KB [ 3419.540379] user_namespace 15KB 15KB [ 3419.540846] uid_cache 7KB 7KB [ 3419.541349] dmaengine-unmap-2 4KB 4KB [ 3419.541888] audit_buffer 7KB 7KB [ 3419.542551] skbuff_small_head 1598KB 1685KB [ 3419.543056] skbuff_fclone_cache 60KB 60KB [ 3419.543547] skbuff_head_cache 836KB 836KB [ 3419.544053] file_lock_cache 27KB 27KB [ 3419.544516] file_lock_ctx 7KB 7KB [ 3419.545004] fsnotify_mark_connector 19KB 19KB [ 3419.545502] taskstats 54KB 54KB [ 3419.545988] proc_dir_entry 382KB 393KB [ 3419.546446] pde_opener 7KB 7KB [ 3419.546925] seq_file 48KB 48KB [ 3419.547386] sigqueue 19KB 35KB [ 3419.547845] shmem_inode_cache 1267KB 1363KB [ 3419.548337] kernfs_iattrs_cache 273KB 273KB [ 3419.548811] kernfs_node_cache 5352KB 5370KB [ 3419.549304] mnt_cache 192KB 220KB [ 3419.549780] filp 792KB 1299KB [ 3419.550269] names_cache 6124KB 6137KB [ 3419.550751] net_namespace 143KB 143KB [ 3419.551251] hashtab_node 278KB 278KB [ 3419.551710] ebitmap_node 1149KB 1149KB [ 3419.552198] avtab_node 4980KB 4980KB [ 3419.552658] avc_node 35KB 35KB [ 3419.553185] lsm_inode_cache 1047KB 1462KB [ 3419.553642] lsm_file_cache 70KB 116KB [ 3419.554135] key_jar 31KB 31KB [ 3419.554591] uts_namespace 15KB 15KB [ 3419.555080] nsproxy 7KB 7KB [ 3419.555549] vma_lock 1003KB 1009KB [ 3419.556033] vm_area_struct 1063KB 1063KB [ 3419.556492] fs_cache 40KB 40KB [ 3419.556979] files_cache 74KB 143KB [ 3419.557435] signal_cache 303KB 394KB [ 3419.557947] sighand_cache 390KB 481KB [ 3419.558411] task_struct 1086KB 1292KB [ 3419.558870] cred 79KB 124KB [ 3419.559371] anon_vma_chain 244KB 244KB [ 3419.559844] anon_vma 378KB 378KB [ 3419.560341] pid 58KB 78KB [ 3419.560822] Acpi-Operand 72KB 118KB [ 3419.561323] Acpi-ParseExt 35KB 35KB [ 3419.561796] Acpi-Parse 51KB 67KB [ 3419.562297] Acpi-State 31KB 51KB [ 3419.562779] Acpi-Namespace 24KB 24KB [ 3419.563293] numa_policy 3KB 3KB [ 3419.563753] perf_event 61KB 61KB [ 3419.564251] trace_event_file 212KB 212KB [ 3419.564713] ftrace_event_field 482KB 482KB [ 3419.565220] pool_workqueue 141KB 141KB [ 3419.565690] maple_node 984KB 1112KB [ 3419.566186] task_group 16KB 16KB [ 3419.566651] mm_struct 220KB 308KB [ 3419.567144] vmap_area 133KB 202KB [ 3419.567623] page->ptl 138KB 189KB [ 3419.568118] kmemleak_scan_area 64KB 119KB [ 3419.569840] kmemleak_object 85375KB 95636KB [ 3419.570342] kmalloc-cg-8k 64KB 64KB [ 3419.570808] kmalloc-cg-4k 2056KB 2176KB [ 3419.571318] kmalloc-cg-2k 2116KB 2240KB [ 3419.571790] kmalloc-cg-1k 512KB 544KB [ 3419.572276] kmalloc-cg-512 352KB 352KB [ 3419.572738] kmalloc-cg-256 80KB 80KB [ 3419.573249] kmalloc-cg-128 40KB 40KB [ 3419.573715] kmalloc-cg-64 28KB 28KB [ 3419.574217] kmalloc-cg-32 166KB 180KB [ 3419.574677] kmalloc-cg-16 8KB 8KB [ 3419.575164] kmalloc-cg-8 16KB 16KB [ 3419.575633] kmalloc-cg-192 48KB 48KB [ 3419.576126] kmalloc-cg-96 291KB 300KB [ 3419.576602] kmalloc-8k 2048KB 2176KB [ 3419.577089] kmalloc-4k 4576KB 4576KB [ 3419.577549] kmalloc-2k 3272KB 3552KB [ 3419.578051] kmalloc-1k 5916KB 7356KB [ 3419.578516] kmalloc-512 1766KB 1968KB [ 3419.579009] kmalloc-256 852KB 976KB [ 3419.579481] kmalloc-128 363KB 420KB [ 3419.579983] kmalloc-64 620KB 760KB [ 3419.580447] kmalloc-32 539KB 692KB [ 3419.580932] kmalloc-16 320KB 328KB [ 3419.581389] kmalloc-8 205KB 208KB [ 3419.581862] kmalloc-192 813KB 1008KB [ 3419.582361] kmalloc-96 591KB 900KB [ 3419.582816] kmem_cache_node 51KB 51KB [ 3419.583315] kmem_cache 82KB 82KB [ 3419.583773] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-udevd.service,task=systemd-udevd,pid=16217,uid=0 [ 3419.585882] Out of memory: Killed process 16217 (systemd-udevd) total-vm:35752kB, anon-rss:10252kB, file-rss:136kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:0 VM DIAGNOSIS: 22:30:35 Registers: info registers vcpu 0 RAX=0000000000000050 RBX=ffff88800eca8000 RCX=ffffffff822c0b26 RDX=00000000000101f7 RSI=ffffffff822c0b34 RDI=0000000000000007 RBP=00000000000003e7 RSP=ffff888010c272e8 R8 =0000000000000000 R9 =0000000000006d2c R10=00000000000101f7 R11=0000000000000000 R12=00000000000101f7 R13=ffffed1001d95001 R14=ffffffff86099140 R15=dffffc0000000000 RIP=ffffffff822c0b38 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8abc702900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f03ffd8dff0 CR3=000000000bb12000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000000000ff XMM02=000000000000000000000000000000ff XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=736f6c63206e6f697463656e6e6f4300 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff882a3000 RCX=ffffc900023e5000 RDX=0000000000040000 RSI=ffffffff818a9ebb RDI=0000000000000007 RBP=0000000000000cc0 RSP=ffff888018cb7ac0 R8 =0000000000000000 R9 =dffffc0000000000 R10=0000000000000001 R11=00000000f5257d14 R12=1ffff11003196f59 R13=ffffffff882a3004 R14=00000000000dcac0 R15=0000000000000000 RIP=ffffffff818b0b36 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa428e28700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055cc1de69248 CR3=0000000018a4e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=ffffffffffffffffffffffffffffffff XMM03=00000000ff00ff000000000000000000 XMM04=000055cc1dee8360000055cc1dee8380 XMM05=00000000000000000000000000000000 XMM06=697665640031006563697665642e3669 XMM07=00000000000000000000000000000000 XMM08=0000000000000000000055cc1deb8d00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000