2d8a2c1fa0bf58af4a02af7ca869f9a32af3ea896ebe93c9aefcdbf1e9d470f7", 0x1}, {0x81, 0x89, &(0x7f0000001540)="e6a72c7fd3cb8ee399ee7ac2449476afc55a72403fb445941e32f5d8c1b20df79316ab38029a72ac2bccb99e39cfa0e75e5b99ca5ec3e6d5eb2f9ad654e5993a1c4feaf1d0da9b76b71c9e4d069f78c9d6372ba20b24eb3978ceaf2b9520a4e35ea898523e6ebd4fe1bdf2858f0bbdd6f354f30965322db49f91ad53ecb094054635b3a880d20b0445"}, {0x37f, 0xfc, &(0x7f0000001600)="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", 0x1, 0x1}, {0x1, 0x31, &(0x7f0000001700)="b4e4e4d2e57e0f60eda98c79ae6e1c6e2e54431dbfa117ea1c8593e346ec18e060831c1faf35f1881325ae33b578a6d07b", 0x7965b96356bf6b56}, {0x7, 0x7, &(0x7f0000001740)="cb7f3218754a1d", 0x1, 0x1}, {0x8, 0x65, &(0x7f0000001780)="2e728f50b02bb59983fc401443c0f988d914767bc800017a7bc5038d7fff9d2f87057580e755befbbb1d1a2d9b65d5a2f33293b11154a9c514bba2821341bad6ef3958e806d9caeaf4957b140b7331491810752d3691332543c73195316141512b05a6d7a7"}]}) 16:30:20 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:30:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xe00, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:30:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f00000000c0)="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") r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000010c0), 0x10042, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000011c0)={{0x1, 0x1, 0xffffffffffffff3c, r2, {0x100}}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000001180)={0x1f, 0x2, 0x1}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001100)={'wlan0\x00'}) 16:30:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000040)="ac3929") ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) lseek(r4, 0x7, 0x1) write$bt_hci(r4, &(0x7f0000000180)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc8, 0x80, 0x3, 0x3f, 0x4, 0x8001, 0x8}}}, 0x12) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000140)) r5 = open(&(0x7f0000000200)='./file0\x00', 0x400, 0xb) write$bt_hci(r5, &(0x7f0000000240)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc8}}}, 0x6) 16:30:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$sock_bt_hci(r1, 0x3a, &(0x7f00000000c0)="3783d9b5dea3bf68ce2205220738dedc0f9c3b224e824b8121a685644b8ff64fd57275b39f1fd66acd6ba38341e0d40622941ffb244fb9515b2398e800a01351354845467bec2a19be98d43cb9b0216401d800277e377eff817ab34bab43d418bf0bbebcfeea725be3ad7631dc10ed76bee684dd23aca4e862a074c16dae351bf9b9e9b5ccdff711155bd9f4a5d7397ca12d34d929307400cf03519dbeaadfc5b5db8c3b430bfbb195109a9636a678c68af0d8aa8a156c421be25170e6dee047735924bb265d6501a0e2ea3b45110a67eb0533afc5a151b7c74d4396c83de118517dd78f004a9d81") ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000000c0)) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)="a991e1b6abe93da02c2c3803d93142fc954b35c341af9d0495463837c3a5ffbf0601a7615a5a9c7847ec0ea20145ab36242ce13c8b7640e3b2842877a3804893c5b658f241753759c10ca131ad4f487b170b3cb21f75dd3e1f641375d7e92ec1c8a42197c7c511b6c0e5f1a17a9d01efe7c18a58bbfc2b66ba7be7671b48898e242f1994cc6a77de4d73f3c73c6e9cf56f8cc46870479a0c35dbe67794ce5f82d440c75eea5ad274a6cf09455243") [ 2477.770769] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2477.779909] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2477.807534] Bluetooth: hci0: Opcode 0x080f failed: -22 16:30:20 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) [ 2477.927304] Bluetooth: hci0: Opcode 0x080f failed: -22 16:30:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) [ 2479.876632] Bluetooth: hci1: command 0x0401 tx timeout [ 2479.943784] Bluetooth: hci0: command tx timeout [ 2481.924725] Bluetooth: hci1: command 0x0401 tx timeout 16:30:30 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000040)="ac3929") ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) lseek(r4, 0x7, 0x1) write$bt_hci(r4, &(0x7f0000000180)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc8, 0x80, 0x3, 0x3f, 0x4, 0x8001, 0x8}}}, 0x12) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000140)) r5 = open(&(0x7f0000000200)='./file0\x00', 0x400, 0xb) write$bt_hci(r5, &(0x7f0000000240)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc8}}}, 0x6) 16:30:30 executing program 4: r0 = socket(0x2, 0x800, 0x7) getpeername$unix(r0, &(0x7f0000000100), &(0x7f0000000000)=0x6e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x1, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x7ff, 0x10001, 0x45, 0x2, 0x3ff, 0xfffffffffffffecf], 0x1, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 16:30:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000080)="5099bedd36be69dc891d160046c5448b3c748be10a781670fd568243e9b6756cea9267f025a94e713809417db75aaa09") ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f00000000c0)) 16:30:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x2f89, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:30:30 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:30:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x4, 0x4) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000040)="daae61c632e0228821785f2fc427b37671d18bfe723fb932a46315a657b5864175e8071c3896154fc85439c56703b74854774b38d283b6e0b1df8c25be07bfa891fa4653c20faedeaa0baeb4e32cc21ed72ac507bfcf38c31c7699f0d32c1d") ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) syz_open_procfs(r2, &(0x7f0000000140)='net/dev_snmp6\x00') r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) close(r3) 16:30:30 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20840, 0x0) pipe2(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000001240)={0x20, 0x0, &(0x7f0000001200)=[r0, r1, r0, r0, r2, r3, r0]}, 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) lseek(r4, 0x7, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000140)={0x0, 0x2}) r5 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000040)={0x0, 0x4, 0x8}) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000080)="0d3728bae721bca799944b281773e949c7e63c7ad1d1a0d372dcc4a4665fe2416cb5b7c070c0cff2d6e05a6cfae5a702b3eb6eba8a854b7063a66f33870f077778c5b0d6fa863f9e6433f6887defe0e2c3e990353319e26facee3a3f503c11e5c67fbe76ab312b56ff94b5454be6e43cf2526edeebfb32f1c4cec0fd4ac76ffb5305") socketpair(0xa, 0x3, 0x2, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000001180)={0x2, 0x4594, "b2dd4a", 0xf9, 0x20}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d3, 0x0) lseek(r7, 0x7, 0x1) syncfs(r7) 16:30:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000002080)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000140)=""/18, 0x12}, {&(0x7f00000002c0)=""/32, 0x20}], 0x2}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f00000004c0)}], 0x3, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/222, 0xde}, {&(0x7f0000001700)=""/246, 0xf6}, {&(0x7f0000001800)=""/122, 0x7a}, {&(0x7f0000001880)=""/115, 0x73}, {&(0x7f0000001900)=""/8, 0x8}], 0x6, &(0x7f00000019c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001ac0)=""/14, 0xe}, {&(0x7f0000001b00)=""/146, 0x92}, {&(0x7f0000001bc0)=""/212, 0xd4}, {&(0x7f0000001cc0)=""/252, 0xfc}], 0x4, &(0x7f0000001e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000001f40)=@abs, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001fc0)=""/13, 0xd}], 0x1, &(0x7f0000002040)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x5, 0x120, &(0x7f00000021c0)) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000180)="072be875eeee2c0134d6be76e42054e4f4097d8824cc0004e6fff48fb5c3fd32c2ffb661e16f29294042455f8d46f5289594a4d3e5dace2cfd1b5b04005ab1f7c969e493954f583fbbbbb065b38580a3ca6f04dcea033fae2e8bfa0383fac8ebdd44e1c24f2ac7948fa2ae014944f9b9306496d85b7fb8fe7f2d586756750033ed56b69cf5834266e62072c8996afe12c9da6f2e6c00"/162) dup2(r0, r0) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="cbfa065561e356629528aec9963897a4bab58eec66d1bd2fd8cb259279ace2bad147ed421afa0100000000000000876f7ad99c171522ca36810c8c916c67d82f2214e598f93ba98b33098d25b02cad8f29d2c92f503268e55c39d1a7ecb6d3b921d461eedebeb0dec0e8daab3b1e806e287fb66f081210d5ba5f4beb3d562a64ac843182b55855b67e8f4c0473c458043b9896af38cf3d30479aeabf972d2cc5a3c2") fcntl$setstatus(r0, 0x4, 0x800) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x800200, 0x0) [ 2487.907959] Bluetooth: hci0: Opcode 0x080f failed: -22 16:30:30 executing program 2: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x4, 0x8, ' Ul', 0x3f, 0xed}) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="fee7865df722e331e41329ab5c4e06ce9356c82c53865ab56e3e14e0eaa135da55c429b5a14baf7a0f9fab11be721a88ef523548371ca42a25d3f5e8991ec47b267f7637a03181f8d4ec73a3f3fc7c7ab3946841980c3278be50f1737e6c0a48864609d915e8d3f1e64276dc771a104c7423637f96") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) 16:30:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xc9}) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) fsetxattr$security_selinux(r3, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='net/icmp\x00') r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d3, 0x0) lseek(r5, 0x7, 0x1) io_submit(r1, 0x6, &(0x7f0000001780)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0xc19, r3, &(0x7f0000000300)="15e526bb8f1529c27c3320cd23335bf909bbc8f3ccbf7db5254284a96f8f2a5326a71e63709932b168866bb9f64d7c30966290fcf8c27c3b7bad60e36610fa28be9df5ce540a7eab5d3169b4a101abbffbaed1", 0x53, 0x80, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0xfffe, 0xffffffffffffffff, &(0x7f0000000400)="17b87cdabc9c901596952a91125ce4f6f71cfafc896a4beac19e5ac2092a71037269ccc146159abda6ab6a6c22c2040af13908b064c51650e882b8cc2df83b50b3f4919ae055710041945afe549a5f6d482406a25e45dc82c66e034a146a9ee8ec6680d87e2bd7b55289b0e10d83b820c75448f532cae95cafb6004e0955ce32d448c3aca02a4eba0eacefbb8b265dde021b0b2cb56562d97a7f27c79c34bfb5f8c85b12ff978183c4beddba622e6930dce7a497d111fb8decaa80d16cd726bf933d5b1a7d2fb9db059f8381ee70437513a7cb453e26b5a41dbaeb3bd7", 0xdd, 0x4, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x7ce3, r0, &(0x7f0000000540)="884a8146228a29f925cb7e9982c396896530c6d6d276e94c95bef629594f132523f3c29b29cc1767ee4877925a8098cfccedc4b0740561985286c7d8dc1db6c7bc717839d6d8398dfd769a8d446e8bfffc796f836ec37768f66f35a3b257acf6c25b65ffce6f745160309ac6b81f671ea30fc7373346e2a526e4a42b", 0x7c, 0x900000000, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1ff, r2, &(0x7f0000000600)="11d3d4af93e1344f82da2fa490bd4a9b94289e2ae54ba05aace353683673", 0x1e, 0x2}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0x2, r4, &(0x7f00000006c0)="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", 0x1000, 0x80200000, 0x0, 0x1, r2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x5, 0x4, r5, &(0x7f0000001700)="549c", 0x2, 0x40, 0x0, 0x3}]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/117, 0x75}], 0x1, &(0x7f00000017c0)=ANY=[@ANYBLOB="1800000000000000010000000100000026b1", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32], 0x80}, 0x10040) openat(r6, &(0x7f00000002c0)='./file0\x00', 0x8000, 0x8) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 16:30:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000040)="ac3929") ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) lseek(r4, 0x7, 0x1) write$bt_hci(r4, &(0x7f0000000180)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc8, 0x80, 0x3, 0x3f, 0x4, 0x8001, 0x8}}}, 0x12) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000140)) open(&(0x7f0000000200)='./file0\x00', 0x400, 0xb) 16:30:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) 16:30:40 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:30:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x3580, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:30:40 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f00000000c0)) 16:30:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x3, 0x3ea, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x49e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x1, 0x1) sendto$inet(r2, &(0x7f00000004c0)="08563cc957821d99574447a3e16cdfed9ffb46f2667a63f9f0cee302a52b8d3f506bb07462a1fd8bfb909b51d218e0083b4c45528012a317b4866f135923c3dbb87745476a9cd365e2e373ac713ac2388e1a160cca8dbf5d8f8b3fdfadf5804c69c078a3088271fe22558f861763c18b4e22ca73215faf2f68fd067b6ddfe834862192e187", 0x85, 0x0, &(0x7f0000000580)={0x2, 0x4e23, @empty}, 0x10) 16:30:40 executing program 6: ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) lseek(r0, 0x7, 0x1) fsopen(&(0x7f0000000100)='ncpfs\x00', 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) lseek(r1, 0x97, 0x3) getsockname(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f00000000c0)=0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f00000000c0)) 16:30:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x689b, 0xff}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) [ 2497.973389] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2497.978563] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2497.991024] Bluetooth: hci0: Opcode 0x080f failed: -22 16:30:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4305, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:30:40 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) lseek(r0, 0x7, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000000)="c93f402becb8067d2f8a1ab2918d3b4f09aa2293f6b4a749bbb1ca37ed1f1e34dd9e1baa04644fe88b36cbded3491fa272399b2dcb2542bdf39bd255f674a0e9fd3d68ca08a6b85908e492b0b5f93207d71d5a819c71d249dd2cd17d0002cac8072f007ca2515a6b489aaa74d295bad2722564aaa3e820509d754d8eef8112a937a16e7d819ac1abafc0367275d0c2adc046a3887ae954f074e10511f9208ca165e70900154510a4a9a9a8ca56616bd6225f0947cead09e1f47aa622935ffc07b5e64447ac98cdb2f930a346283b5278c744e4dcf7b6fcda0416a0176efaf8203ffb90ba524b022d892cbecf890a9502fd5e257c2ed7691b00"/264) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000140)={{0x5ed}, 0x100, '.\x00'}) 16:30:40 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:30:40 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f00000000c0)) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}, {0xc9}}}, 0x6) 16:30:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000040)="ac3929") ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) lseek(r4, 0x7, 0x1) write$bt_hci(r4, &(0x7f0000000180)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc8, 0x80, 0x3, 0x3f, 0x4, 0x8001, 0x8}}}, 0x12) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000140)) 16:30:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:30:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000100)="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") 16:30:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SG_IO(r1, 0x2201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) [ 2498.209212] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 2498.230432] mac80211_hwsim hwsim41 wlan1: left promiscuous mode 16:30:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) 16:30:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x1cf, "db5266", 0x7, 0x7}) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) 16:30:41 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:30:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:30:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4788, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:30:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7, 0x4}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) [ 2498.381841] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2498.387174] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 2498.389600] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2498.400712] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2498.402200] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2498.406780] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 2498.450405] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 2498.462265] mac80211_hwsim hwsim41 wlan1: left promiscuous mode [ 2500.422233] Bluetooth: hci1: command 0x0401 tx timeout 16:30:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4888, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:30:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:30:50 executing program 7: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:30:50 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) 16:30:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) 16:30:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)) 16:30:50 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) lseek(r0, 0x7, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000000)={{r0}, 0x0, 0x2, @unused=[0x3f, 0xfe000000000, 0x6, 0x9], @subvolid=0x40}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) write$bt_hci(r2, &(0x7f0000001000)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x84, 0x21}}}, 0x3) 16:30:50 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000040)="ac3929") ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) lseek(r4, 0x7, 0x1) write$bt_hci(r4, &(0x7f0000000180)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc8, 0x80, 0x3, 0x3f, 0x4, 0x8001, 0x8}}}, 0x12) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) [ 2507.867386] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 2507.875433] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2507.898883] mac80211_hwsim hwsim41 wlan1: left promiscuous mode 16:30:50 executing program 7: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:30:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) 16:30:50 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000040)="ac3929") ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) lseek(r4, 0x7, 0x1) write$bt_hci(r4, &(0x7f0000000180)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc8, 0x80, 0x3, 0x3f, 0x4, 0x8001, 0x8}}}, 0x12) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) 16:30:50 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) 16:30:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x3, "368825", 0x8, 0x20}) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x4, 0x2}, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x1, 0x1) r3 = openat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)={0x252201, 0x1c0, 0x15}, 0x18) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0x2, 0x3}, 0x6) lseek(r1, 0x6, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x1, 0x1) openat2(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x2000, 0x8a, 0xa}, 0x18) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000180)={0x1f, 0x2}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000019d3f0b555ec3ec5bc87ca074d87b83aa4d229e33fd10388f4c2e7f3aa6688cbe166f053619f66c2f3f46d50de1f7b0b061c23628898a685afb790750d93580a8ae8011a239f", @ANYRES32=r1, @ANYBLOB="04000000000000002e2f66696c653000"]) write$bt_hci(r3, &(0x7f00000002c0)={0x1, @le_set_ext_adv_enable={{0x2039, 0xc0}, {0x0, 0x8, "8effda9834628235e8b575abc1bf0c040e1ea3958146ca390f75c2b77d44333884ae65363ae1dca0d6bbd7f76f10574a9f59a221d92bfcb77714450f9dc498fb2290aa179b571fcc59518974b95aba0cbe35789eeb47a3eb3cef477e08812e2afb06f3c8002fc988aeaacd1eb3ad2fced20c206445e106f56d3fbee2ddf1cbd90c81a66ea5ebf940359418ea4d52682c20611725afa45b58b863f16cb16d4f67b49cb871209bbb3ce08cfe3c73124c8e72a7468fc0432155a2c0ab44fb21"}}}, 0xc4) 16:30:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:30:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x5865, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2508.031353] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 2508.032044] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2508.041183] mac80211_hwsim hwsim41 wlan1: left promiscuous mode [ 2508.070449] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2508.090366] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2508.862452] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2508.865137] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2510.084654] Bluetooth: hci2: command 0x0406 tx timeout [ 2510.085737] Bluetooth: hci0: command tx timeout [ 2512.132673] Bluetooth: hci2: command 0x0406 tx timeout 16:30:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f00000015c0)=[{{&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/176, 0xb0}], 0x1}, 0x5}, {{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000001680)=""/4105, 0x1009}, {&(0x7f0000001280)=""/139, 0x8b}, {&(0x7f0000001340)=""/253, 0xfd}, {&(0x7f0000001440)=""/157, 0x9d}], 0x5, &(0x7f0000001580)=""/7, 0x7}, 0x8}], 0x2, 0x40000062, 0x0) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000000)) r2 = memfd_secret(0x80000) bind$bt_hci(r2, &(0x7f0000001640)={0x1f, 0x4, 0x3}, 0x6) 16:30:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc8, {0x20, 0x40, 0x5, 0x3000, 0xfffffffb, 0xfffffe01}, {0x3f, 0x1, 0x10, 0x7, 0x3, 0x2}}}}, 0x25) 16:30:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x6000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:30:59 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000040)="ac3929") ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) write$bt_hci(r3, &(0x7f0000000180)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc8, 0x80, 0x3, 0x3f, 0x4, 0x8001, 0x8}}}, 0x12) 16:30:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) lseek(r0, 0x7, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x3, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000000080)='bond0\x00'}) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f00000000c0)) 16:30:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:30:59 executing program 7: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:30:59 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) r1 = syz_io_uring_complete(0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x8}, 0x6) lseek(r0, 0x7, 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x0, &(0x7f00000000c0)="0500b7012dee6a0001dfc075a1a27d8902e80b9b73925908dd67ad6da2a50deacd148228f8c392e2e372821a79537008cf8d8a867025719385065cd2275876480509d91b638e6bed8718aeb62ee5dc93b8572a311ed9054424889aad389140274b2e2c9ec98d4f") [ 2516.893180] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 2516.897270] mac80211_hwsim hwsim41 wlan1: left promiscuous mode 16:30:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x6488, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2516.940642] Bluetooth: hci0: Opcode 0x080f failed: -22 16:30:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) [ 2516.959263] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2516.993289] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 2516.999329] mac80211_hwsim hwsim41 wlan1: left promiscuous mode [ 2518.980653] Bluetooth: hci0: command tx timeout 16:31:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000018000000e19f9a3c940400000000004d5487abf1dbb6bb6aa087097ff6afda9903d7bfc9352c752e304673a26c7b", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="000000002e2f66696c650131"]) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f00000000c0)) 16:31:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 16:31:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000040)="ac3929") ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) 16:31:08 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:31:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x6558, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:31:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x58c01, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x9, "6a289f", 0x1f, 0x4}) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x4, 0xffff, "b70e0b", 0x1d}) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) 16:31:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x7}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 16:31:08 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:31:08 executing program 5: rseq(0x0, 0xfffffffffffffd88, 0x2000000002, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) write$char_usb(0xffffffffffffffff, &(0x7f00000000c0)="d22480cb27b71b8a44c2a173f3c59adca8e2e5252524886ff022a51a589eaafdd7f2a26b2d64", 0x26) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40086607, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, &(0x7f00000000c0)) [ 2525.421203] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 2525.443066] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 2525.453930] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 2525.460273] mac80211_hwsim hwsim41 wlan1: left promiscuous mode 16:31:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 16:31:08 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:31:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:08 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:31:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000040)="ac3929") ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) 16:31:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8035, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:31:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) [ 2525.640838] Bluetooth: hci0: Opcode 0x080f failed: -22 16:31:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x4, 0x2}, 0x6) lseek(r1, 0x7, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000000)="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") r2 = memfd_secret(0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000140)={0x8, 0xe9}, 0x2) 16:31:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) [ 2525.752354] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 2525.786923] mac80211_hwsim hwsim35 wlan1: left promiscuous mode [ 2526.278850] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 2526.280414] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 2527.428688] Bluetooth: hci4: command 0x0401 tx timeout [ 2529.476874] Bluetooth: hci4: command 0x0401 tx timeout 16:31:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8100, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:31:17 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:31:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x9) lseek(r0, 0x1, 0x1) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x144, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x62}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x3}, {0x4, 0x5}, {0x1, 0x5}, {0x80, 0x6}, {0xf8, 0x4}, {0x4, 0x1}, {0x6a}, {0x0, 0x1}, {0x81, 0x1}, {0x4, 0x7}, {0x0, 0x5}, {0xf8, 0x7}, {0x9, 0x5}, {0x3, 0x2}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x6, 0x2}, {0xd6, 0x7}], "3ee70123953c5d84"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "98b3dfb69c2fa5a0"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x5, 0x5}, {0x4a, 0x2}, {}, {0x1, 0x6}, {0x63, 0x1}, {0x4, 0x3}, {0x1, 0x2}, {0x2, 0x5}, {0x1, 0x5}, {0x3f, 0x1}, {0x7f, 0x6}, {0x20, 0x5}, {0x7f}, {0x4}, {0x2}, {0x5, 0x7}, {0x2, 0x5}, {0x80, 0x4}, {0x3, 0x3}], "6822d20669e9b411"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x80, 0x5}, {0x7, 0x6}, {0x80, 0x6}, {0x3e, 0x3}, {0x1}], "9dcd2c57e717e053"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x40, 0x2}, {0x6}, {0x3f, 0x1}, {0x1}, {0x8}, {0x3f, 0x6}, {0x4, 0x6}], "ac397f6f8462543d"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3f, 0x5}, {0x80, 0x1}, {0x8, 0x4}, {0x1}, {0x5, 0x5}, {0x9, 0x7}, {}, {0x0, 0x5}, {0x3, 0x4}, {0x27, 0x3}, {0x2, 0x5}, {0xff, 0x6}, {0x4}, {0x3, 0x4}, {0x83, 0x5}, {0x5, 0x5}, {0x7f, 0x4}, {0x4, 0x4}, {0x0, 0x2}], "c1da3732cbf07575"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x6b, 0x7}, {0x6b, 0x4}, {0x8, 0x3}, {0x1f, 0x6}, {0x43, 0x7}, {0x2, 0x5}, {}, {0x3, 0x7}], "8f61e334e6cc1253"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xff}, {0xab, 0x4}, {0x6, 0x6}, {0x40, 0x6}, {0x3, 0x1}, {0x1, 0x7}, {0x42, 0x1}, {0x1f, 0x1}, {0x2, 0x4}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x1}], "f885bdf13a594eb3"}}]}, 0x144}}, 0x2000c844) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f00000000c0)) 16:31:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000000)="89831474ad975fc0b745f245dc393adbab83bd73dc200f6c3d2a3cbbd475b757869948e4607e978c70e75247174e692778fc280dbfa8dd79d421019e0eb066ae111b965b8f6ef7d9a47e7c4be4ad5e79ffb29bfbd31f8ef7786e9b7a") 16:31:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x28) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100eff37dfbb4a68ba80300", @ANYRES32=r0, @ANYBLOB="0f6bffffffffffff2e2f66696c653000"]) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x258, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1e4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x22a, 0x5b, "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"/550}]}, 0x258}, 0x1, 0x0, 0x0, 0x40}, 0x24004005) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) 16:31:17 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000040)="ac3929") ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 2534.943247] Bluetooth: hci0: Opcode 0x080f failed: -22 16:31:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) [ 2534.971230] Bluetooth: hci0: Opcode 0x080f failed: -22 16:31:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:17 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 16:31:17 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:31:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8847, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2535.109004] Bluetooth: hci0: Opcode 0x080f failed: -22 16:31:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)="37c589e01151308d5bfe1d23be93d79149a52d7bd0909888115009c69e6f933acb8ff98de097fbe0b84eb9a33ab77b98984f45a5cae6b75d968597ed8edc62bb21dccd0bbe9b75f17d85805edc72e893384633279486179cca7239b9620427e352d7a7e5abc7844ea47ddda9de3e63e299df7d6005f01626daf065d5f70e1616ab9215abe7cc713e548cf7b14f205ea07357e41a23c7f09222f8e6f4b17c022896a0c9c84f5f86e995bd") 16:31:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000040)="c27590e6e8c654a8a6724a2812d10163e2f4dae30873fa58a3c14040edf7f1075b81975baf6dd9012d876f8f651aebb87b811382f3e6c62912171ae90eaa0781dc707e2e124297a95500dc5b23b6bc582e262105202ceaab20b16851991fbcfffa367c11f6c1cc9bc554ca0031dd970fb700") 16:31:17 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000040)="ac3929") ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16:31:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "0a6b83", 0x5a, 0xaf}) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) 16:31:27 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:31:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000040)="ac3929") ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:31:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8848, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:31:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x1ff, 0x4) 16:31:27 executing program 2: socketpair(0xb, 0x3, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) pread64(r0, &(0x7f0000000100)=""/107, 0x6b, 0x5) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x3, 0x6905, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c8, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5510}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf3, 0x3, "c4eac3c6d571a131dcc16c5dd109ece75b64924e6b841c3b16f8a043109227dc066cac78a1d8a3fd284beb92a66d3ca4c8e51053003b05feca86e47bba47b61ab9b71b593a4c2d6cdcaeda09e8176107bbeaa38032de77189315ebdc20d4c0e22e3320766a23e2be1e32f88b1f4943739b0297508503b3ec563fa94db65307595d42919271c5abde4dee54636505f61e5ae08c8cd8716f09248901342301b6cddf0a6cce3d1662215da9db9813377910e738a68908f28dfabd94dd27472fc25b51597b3300a82e2dff3cbdf5302344975895bfa6c04930f7c850d54760a39b8f21ac3c81f68f0a0f81b562fbf46496"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x39c9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcb5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x82b2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x87}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x90}, 0x40) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f00000000c0)) 16:31:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)="7af44f61362a27d006df701fab409eb27daa0befa144387958548c5cbd80227afb79e575b402a8534e57388b53b4120dd31320150f0d7557793c00ce6d59fe52606ead6326bc42836ea548f96eede821bb") ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) [ 2545.140705] Bluetooth: hci0: Opcode 0x080f failed: -22 16:31:27 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = dup3(r1, r0, 0x0) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="013404f6d77b07aaaaaaaaaa1000"], 0xb) 16:31:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8864, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:31:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) 16:31:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 16:31:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:31:28 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:31:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448da, &(0x7f0000000000)="64aca75ff31054c5b7271c5a009a2b6984d20aadb9779efe7dce01edab4d3f") 16:31:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:28 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x40, 0x6, 0x9, 0x44, 0x0, 0x1000, 0x12100, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff8000, 0x1, @perf_config_ext={0xddb7, 0x4dbb}, 0x8000, 0x100, 0x8, 0x8, 0x2, 0x1, 0x55ca, 0x0, 0x3, 0x0, 0x3}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) close(r0) [ 2545.396996] Bluetooth: hci0: Opcode 0x080f failed: -22 16:31:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8902, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:31:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7, 0x7fffffff}}, './file0\x00'}) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f00000000c0)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x81, 0x16, 0xff, 0x7, 0x0, 0x0, 0x400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x20, 0x7}, 0x10104, 0x10000, 0x1f, 0x8, 0xffffffff, 0x8, 0x75, 0x0, 0x18000000}, r1, 0x6, r1, 0x2) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000140)=0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) 16:31:37 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:31:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:37 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x40, 0x6, 0x9, 0x44, 0x0, 0x1000, 0x12100, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff8000, 0x1, @perf_config_ext={0xddb7, 0x4dbb}, 0x8000, 0x100, 0x8, 0x8, 0x2, 0x1, 0x55ca, 0x0, 0x3, 0x0, 0x3}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) close(r0) 16:31:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) write$bt_hci(r4, &(0x7f0000000180)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@any, 0x1}}}, 0xb) lseek(r3, 0x7, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, &(0x7f0000000080)="633104ca61269b861432874f942f16e8aed714d02a89e4c6401b76b45b9a5f400d5a3b22bc5589bd91c16d3bade81949cbbe447b257da7a60c5b8e838ff4ab3e1bbe78a6b486f1c96079d9cbc05e901b01db3e7494e1c1e33bb39dd763e3af9f132529a797d24316fc1008f6030bc296270383f43b36e328fc494eae26afa424c98ada52e5683a0b754cf23777dc9bbf44eee1477972") write$bt_hci(r2, &(0x7f0000000040)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x9}}}, 0x5) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x1000, 0xfff7, "c74158", 0x3f, 0x12}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) 16:31:37 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r2, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x142, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) fsetxattr$security_selinux(r3, 0x0, &(0x7f0000000000)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xc) 16:31:37 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) [ 2555.252637] Bluetooth: hci0: Opcode 0x080f failed: -22 16:31:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:31:38 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x40, 0x6, 0x9, 0x44, 0x0, 0x1000, 0x12100, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff8000, 0x1, @perf_config_ext={0xddb7, 0x4dbb}, 0x8000, 0x100, 0x8, 0x8, 0x2, 0x1, 0x55ca, 0x0, 0x3, 0x0, 0x3}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) close(r0) 16:31:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8906, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:31:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000100)="561d1ed051e32b237b8934eb5e8e28be090ce5dde0ef13b05bb06a257fc495de9675366634cd2c4d60f996ff5245c066ee78877e6cb4d4a48c65383d3f5a7808f3d372d21d8905f6000000000000b0bf7ea1e4624bde31136a36eb0e65e2a25ca0b2b3e3a232237eefb8fc86ed5e0a9d6ba2dfc0265f0f09fab4d61116e928d86245a45b9876da454bcac2ff0cda3c25e56eb1b38e990e41113d1b7c9ef8f61ebe26d10500000004ec178f4a3d2583cacefe5d207588380a01aafaae2f32da903f0f52d5ad72092120a2be2d77fd3c6f513dc9375af25f584b9b5835a583c3a48e82178fefd2") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3, 0x3}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x1fc, 0x4) 16:31:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:31:38 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 2555.524659] Bluetooth: hci4: command 0x0401 tx timeout [ 2557.508563] Bluetooth: hci1: command 0x0401 tx timeout 16:31:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f00000000c0)) 16:31:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000000c0)) 16:31:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x892f, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:31:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) accept4(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000140)=0x80, 0x81800) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xfffffff8, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x5, "df90cc", 0xa0, 0x43}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) accept4(r0, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000240)=0x80, 0x0) 16:31:47 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:31:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:47 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x40, 0x6, 0x9, 0x44, 0x0, 0x1000, 0x12100, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff8000, 0x1, @perf_config_ext={0xddb7, 0x4dbb}, 0x8000, 0x100, 0x8, 0x8, 0x2, 0x1, 0x55ca, 0x0, 0x3, 0x0, 0x3}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:31:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") [ 2565.046832] Bluetooth: hci0: Opcode 0x0c20 failed: -22 16:31:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5411, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cbc582f91b164ca3d2407c65cbc06870c77baf"}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:31:47 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) fsetxattr$security_selinux(r0, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYBLOB="0100924a0100000018000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="ccb59cddb5a21bc05ffde8ef7ed1b98dae176de0bb0a215790c2367ca3c6aaa20f6d3f595906b32a4bd54a6ca29ea30ef0ec9897f4ac16e8829c6073e9ef6c817a0b53403093a57ea5db4688cc8e013154443d14f0465eac782dfb93f53abaefd04b89086c0db8474cf13e228f698f6474994e2a503c0d84862ff3fcd829891c4450cb845995cd5c4a50f746a0999f194a982f063cd85a504809724318a1700d0197079d85c918fcfa669d1a45cb0508fead71a333eb2b65fe438aa80fc432cc2a64c761b32f85bd79fb86ce76bf16d56e60684b5024abd76b3124adb8d4d7d3c2c94d3c4837cd62ef1cd6fa42a9f547208ff35899"]) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, &(0x7f00000000c0)) 16:31:47 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:31:47 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x40, 0x6, 0x9, 0x44, 0x0, 0x1000, 0x12100, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff8000, 0x1, @perf_config_ext={0xddb7, 0x4dbb}, 0x8000, 0x100, 0x8, 0x8, 0x2, 0x1, 0x55ca, 0x0, 0x3, 0x0, 0x3}) write$bt_hci(r1, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:31:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3e}, 0x6) 16:31:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000000)="de6957231da1e084b2ef7ceb8bdba355cdd950a1d4fb8df00dd87398020000007d73fe75ff") 16:31:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xdc05, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:31:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:31:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xe005, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:31:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:58 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:31:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x1f}}}, 0x7) 16:31:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000074c6000000eed4000000000000000000"]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f0000000100)="bb16f3a76f4f24acbd71556f84da1dc499c21ef29ac4e59c8ffeff2fbfbe4361335e962e6c17f1dab3c3401de206bcee7a47088ad6d8eb9c07db55e9ff673c3a916b1ed8d4d1dbe7ff48734951a4bad37b7c82aab4c011745cfaff69b4915777803509ec679a5fdb080bf89ab5a4560685d9de64628357db12db0c116974888d47101d6523fb87553c13801739156e8ebf906991c55d299addbf3bda20") ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x2, 0x0, "a26d2b", 0x3f, 0xdf}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) 16:31:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:31:58 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x0, @loopback}}) lseek(r0, 0x7, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000100)="bedb97d5d321d65bf1ef978fc4e9ed40ddcd6bf7a471129f4f107f36452dd04abd73ddca13de12f1aee5593d5c1f458c992d5d4f3545226becb2534704611b9034c355d84686853dd3da55f786b8e133e8bc63477a1c3b8191647bbcb2fcfe0cc2c830f0de79315a2eeb1c6e900ab0f1faaddffbaf0354847769db31335ccb76dc37ab6e7614562c02514e5e030e7f5180047f5fe9c5d6ef8023ae18c8b15f6f04d093bad45d278139f21a6d80ed27d4374dae5d3b43a9d183b0f949478141be2f6c8532ef191ad79e50c7df7a19a0e56efd77b7151c56226b9ba2017bb54a70d06ef154fd8f768945f465431a8a44dbaf7bc53c6c03ca13977f2814dc86111cc439a57bd43f5c8abf540f22ed5b74a228826f51265ffe53c6515e24318c97554f61445e2c4bda0f15bfb14c31bf2f756d9fbe5f84d9bcf49de9c7b2c46362c97c474d54aa1ea3d2132f8c70a96c30f6020a0caa2885f38224cd6036cbbf38b027e15c42d434e334") 16:31:58 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x40, 0x6, 0x9, 0x44, 0x0, 0x1000, 0x12100, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff8000, 0x1, @perf_config_ext={0xddb7, 0x4dbb}, 0x8000, 0x100, 0x8, 0x8, 0x2, 0x1, 0x55ca, 0x0, 0x3, 0x0, 0x3}) write$bt_hci(r1, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:31:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:31:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:31:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000040)="7b3d51f009f7e7c5030cb455e82bcdc3ca65bf9f44564e3b6de3701aee72855e927223c944fd7767afc24df52b629d7ca5ecd7af1d2cc1cc6ae72852c0c6e7bed7785c789d15deb709332b02c36ca5aa2aa0109803e5ec6b9b821f759e317b3c80fa4f4d5dd66966bc14c55a2c68ab214108a7defe1851f1d87a4c6a35d7ff0de927be1c0d8ee56436408c") ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) 16:32:07 executing program 2: sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x810020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x100, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xb6d0, 0x1}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80080, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r4, 0x9, &(0x7f0000001bc0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x9, r2, &(0x7f0000000540)="034613e1c7bafd199832130e", 0xc, 0x10001, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, &(0x7f00000005c0)="dfb9d4c97a7227296720bf21d53f91cae1a6bab9c17cc5b07d09e122cd37ca032553d23f13cb58b5fbae709c4a6d2a3c8d1dacae643749b3fed5d0a1c5ec41e2c545a29dfa48ef85546fac63aa2d6ad89f2f7b40edf706e62c29648b4ea2c8ec485b90453ea23873c7d48e5202d2d927103f1bc52634d44ed53e325daff94f98c8b4dbfa757933dac71c8e70d51c3569b3787cb306910d0c1055a29d64cf154c53f18e21c97ad7684e821d6a6436d9ff325cc18687f204525aaf01410af4a5", 0xbf, 0x0, 0x0, 0x2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x3, 0x7f, 0xffffffffffffffff, &(0x7f0000000780)="a7997a28cb0aa9e3f32561b0920571c019e914df7466b57f4c6c834b237fe61f90628d2fdc0bba6d2edbf41df55de1d75388cd370f99e5a93750480b196ff39fc3f8ff005130fb3c83c4023254235bf20625b3882c24f0516b4bbc7f03caaae6b37d36a3cdc247f75266fd8bfda4b6e5559915630072c68a17ba94f2ae1a25eabe47b4d20d2fcd346df3e7f47070195fdf97a43fdc6c98860dcd6c3cd5bd3522b6b11d011c38f04eee5d604a", 0xac, 0xffffffffffffc599, 0x0, 0x1}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x2, 0x81, r3, &(0x7f00000008c0)="5fa7622d5ba4244c7bf635da95b4525224f9999ac89c05c8da1fff70dd8e7687cb9afcdf225f5b366a25ae717ee6ad468080055754", 0x35, 0x7, 0x0, 0x1}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="ebd306b74f300837a139c5f8cfcad6c7d50b7b339a0dcb4be75d7afa2f84c9fab6ce9c925fc1adf3b0d6a78a6386c33c19c167572f62089fa7700c831b2db41e6308fa6d1778e0112eaa757d5051d7581ece70a37520651e96442fc647884ed861e21d785462fd74522c7056b62dfdf998082cdf97a3662a69c8508f8b117bf754261281e18f1068da19fa89e78661ccaecf22dd48439b4b1ba43f7d0ced4bc92b7d977257bb912637de7ddd2de81fe6e7bd4c36e0f7b270965abb689aa593199bf69a13781a3d055f1a22b66ef0c4c76de9c5d2a1ebc37d16435d7000070292eed96d24dd69797f84a95a1c5a73356369c5afc63104a2292d07986adb5aa2dada4052f1d1c55e9960431436039c0c62c174f1b25ee9aa3102abe2a9ebf52b8759db7d3c4c8422abc04e12fa479b07151d35b5bb22c14edccfbc9115b83f7be13277a33eaab82f40af4056b6ba6c75c037d2fc9a301078e0625fa5b20015540aac412962aa9ad3ed4bbb3480329344cddb2c8c032bd299a042157368a81d2b89f73dbf123430b9ca2bdc8fdba745a56ea56f4cfc402844e27609e62ef6db6e553d1ee881bcdfe8db28873cc68bda5a879fe9b3ba2908d8924370cecbcb8b496936cfff9055be5b56cf761fded5496a2a99a938ad32541c201e70b7e027cdb543089458b3369615866a21bc1895871e16eaa76edcadb3b6aedf2b0b8777fe9881df60fb895be556f54e26a0333377606bb5fa3fc3cf5f3be665fb3ff35963f842cce62262314596f0b183b03afd7b65f962286f0ca814d26fd3e9b39c4a35ce77a2237be27d4f1e24fc311cbb2f4ac49d690074b4923e2ef47ea50665c37d0b61933e8a4cca3947191a2757757cd6dc2a162875c47075e6bb4ac6b66404fb8efb9c77beebc5d8c64977e99fd6ee6b59454a5e94ee743dd0613b385faa085c630976a0dd6375203a728cec863780ce348c24adc25da221fe7f1f574e844fd9b2bc69bd61081c267d2bbeb4c685f9c884e27263af9634bbe9c51f2006aaf05140bf50ac2a193c42bdf63918fa9e67889a63122b71a1f6d2e2302aaa9fc905e0504a94811ac5983fdaed8c5c08386f97e4803f2b96db800e56ed50098e3bd9c790fc614f0db7dd0d659b0187b2aee31e2b662b91b9c34df5c3ad340ff3b042ff0e54d2d04d4d76229356182d050d107f98373c51eaace61f794b2c959cf715d2259fdebbf24579f1d88f3792dc0a02cfe0cdd584f0e935756a4ac5fcd0436aa75d36069365c2489320a7095dc0fdff0c10ac315232e0ad14b5960508ff5816694c8bbded9d3fa6a47d7fa191ee1a177e1c9bdc733a0d73ed019cd2329e874cd4d8e1ce4d106cf8760f4a3a54d8801894a78de8f6c18cdab5c7bf40311c6ea225527c1f3275e4c7ed8514a2aefbadef96bfe52e9ca86b42802533ff1f47f07ad5ded782faad2d81dfae0bb767702ba36067f033483c43ce70d11e5d5b28d4c3b9001b503ebbeb9adc6525636fe8648443f12aa59afc3f0bf92d830bb868d97b996134fa8444f05a627b2dcff02788386016f8fb41acfb002cd0738224b57d0ba901779837db46923d15c772cdc8d06e753eda991e7ec2a4b4d73d8b7786366dfa12acb4f7e7222ecc661ccd7637cdbecfa1c05f75a00dd71a02f490bdfa0b33ce83b3cfac34af30cb38b1c821c32ea3da07b68b31a1307ed598fc25a8f6b29823dfb0d966bf0547bb071bc42aa71b5e29ffee0a441281e2df315a10f1b8dd7ca68f4404a6e28665a1fe3ea9e0080bdafb6a9cdab420e922984ec04c0159030952a036850b001e8b7cf3b2208657c7bfaf62028545584f4f7f5ecd6305ecc004561cd1ad9550586a4c9c90d223e0229d489b737effd5efa783a284456919d9b5c50242d6cfb33982c8f0669b0557cf6115fd735f6c263bc33c92a6d76fb92d6989abab7a1507443adb1a5dd08b5d2414f02940a32e135c54e82a65d10108a197ff729f2aa6d55bcf0950d8c53d256a5499613e3e6dbb3417f2799a2cc12779cdcd237490acc2162f6a701b2295ca0a8acc05bf05ba591bcfaa1764466418d901c87ae6717e761a215664d08f01b2f88178f0b435ca50f47ab105cc18956d11c2bc5f05826f075a1403863bb7d0efb8ea8d52c09637878f9b1b370447a8381e752786288a78f3c78da018f0523b1b708225ee7ca9c019730b8d19c5e4bf0da39c9790305095b251c55eca99223b860454ace305c86e212b0e310bdcc1ef928247efc4baa5f3e49cdd2d9744334116097074aa30df7f3bf6baa8fcf086e2f6d1a440ec806e0c99a71b71474a0e479a5d8dd079def3b659d6b50bf977b8f85f21dd150b797f5f1aad39ba0e8ed4ba658de5892a173a26e6e155fc8d5b912d16a103b5cd5cc3835e1597921f498b534a5fdae4c51fb53da7c34300def340d713d5b48c449ef7e100eb58e47289310f35874f3fa31404ef401bcff894f048153820f39425a4ac1cec7fc1e1cdd3434f632ce1647cbe7a227dde7417f816f8b1dc22866d41226dcae7b85bd4ccff250bd7dbf97cdd12592ba8719d269c3d9948edb39361d5c8e368c5602f12a8ddef8bda6bcc9b869a7562169430f6b9da8adb1902abe4f0e8acaaf587cc0d70b5bdcafa6c7eb28c9f6ec6dd06342ceee4468c45205c10ab303ce09dc772ad5a1d76ddaab680064272c5c75be927793fab4ffa089fb3aaa22774430ec322519bcc9b991afd6979888a79544fc230db3f54f7ee941b52e7cc01e7ee6069aa46632961e8fd78b601292dc8e9be21512939f6b84581b3e9858f3f34bc81e19e5d5eae7e9dfc27c6ddcce7cd0a3e55d4834a438b3ab1cd87c1dfcdbada4b0f251fd1592d6d7f8cb955d26312675004713b7bf9956ac830f904d80d6a3d39ac49e5331aacc3bc66ef8c2d46dcc6e6b762733913643de4d8a473634e90cf46c9c802f72b3f4c416f2c84160b92335d401134dfc1725d9d9d282ca008097cbc2b97b73270ab7993038ffea48720333a90a20411b85df5e8709405da1618628d6ba64c1d401f62fdc7454a8d54f15554a9548c733fdc8481464d1137920777192148f11262e6d5ff5c4b97af6a96966e1df52e2e5dbc2d1c62ec2e332d7e5df12cefc82072950ef7048ffd18ac8122e41a11a736e90c58b9a1b8a38197396290da929974473e53a20e84626482f58d9237ed98d517a7debfda3cd2574b47e7b7770fe3111efef0c79657b1d819f4a1bba10cb27b6287440e834287b195e6707ce8979084064ddfcaa214bf238d4a11007cad27d973f2bf9970f3332a2428dcb23e9cd5fd6a2399c433184788673ed0ea16c25cf23f41776d35035129c2277fb21f21df082210d5897e02a4ea1a2b865a314290ce2b22879c1a70d020125207ec96646f0437c335d1e2ed71173342c0d42b92428ab6890c1591291b1270bdb6b683bcfd6962cbb7f04ee1d4abacf51e0c491801cb9d3d00d8ab403c805b158b1d3b2b66e3eb27b79a9a1479cea2f35b632559ddac66ffda2e53143b2d558d1ee957c76cc4adc7b60e3aa8fb15475f954bb753d244c34246f256b9268ad8c60451b588886570b0c1dc2953c45cd1a096a9e7534e37080c920b197e23b3bf07540a66e76fdbdd4a84bdc5846bb4797fa591ce12d0873d4cce93b327a3fe584accf39fda0cd55711eee75f4ebf1bf72f663287c1e61888a5d4664cf5f71443418ae0103694b61facc103268ad6b43b2a7883235a9dd99d8dd8068383dab255576433a31775aa7aeedeee8ba69e17fdd838be4f099d836874a70d765650c0a803898a9c2d896ec903cb7c42153f26a5a41bf7c7b89bbedcc06855187a81dcb528b249a4014a727617d00368a9e5c3a08f4f1cc03f3c1e41e110272e9fef90e60581c70972761eccc9fca2749ea18f1fabe1c73ee33aaba13148fc5c4be08e1dbe78b693a866342b9942a33eed6891206e352246e3b7e6219ecc23c85787f2db2e91c399b074c1cd1704979b1697d034e2eb6e1c0d1e59e736042675680603eedb0f7f24678618c690eedd18168c26f4e6dd04e037af237c36d0c92331a50b62dfe6dd416ad30417786d6bbdfdcd1108e4fd2becc2b2f63d64bb4446ae3b6c9baba6601ab4dea3277c577b1a42a667fd6758e1e1caf0e99c3a874fe1bfd1c23fd98b765a240608a60239db25bddeb8fe79eea04df91fc8b04070007f933f024e24563a18a7c0becfb149e757bd659c073c83e38c34cf7595feb4eb7438c9f715a87be5802f4373e176b3f314a0b622d2a7d9ac594cfc2da7d9de8ecb90b0124dd66164843b4c9d77592197de30f78c833bcbc2ce957403712b71ede47a6dc4a6ab8c704dacc6a20ed839663842262ae53792b61c775cdbc0a74557abd644ec5d52cb433688d2cb209e453ece717e4d638426c7d3f7ac4a5b0c8345973ea064edf837928c699c1fd43e12f91ce88e77abf889ce3190a2db11a98486eae1b08d185cef64135b9e8f41c22180c9b163b4eb413d7572eb3b1ceff5100aa3be41ffb2ca5bf7bbeda048fb8b21e69da1dac9f2a60b1338403d8eae7b6985d01dd221f98859fed6e1af3f757144978a56487a2cc6a87a94b5805d4ba7b8cd6a316fbbf46c7026fa02de4a6474ec3f911250c6d04d66cbef1eb3ace88983294964605f265c3275dae2bbc630735521a40bb656b668cd281c1ffa295de0ae3a115f0dadb535846fc31907eb1b422fd996ca3e0e53f6c74cb08acb07841eff680627d20c2f67fe9c29939529a4bd4ab9f64d6663973f1a0926703473fc699aa18aafff9b0cdb3bba703a2bd8e39db0c13200d0c1d3221a7e76444fbdbea162db51a4da69a53dbb227ea5516ff215411f9d81b2e46f04cb0b7232b485c645e897e9cfb55190fbc162ddf90301added328212fe535e68fce3b2f6a111c7fcb54451843ac3da8d8844d7d0c4554061be727839e2edb06f7b445c189d8eda331b68a45c6c3e426d326c32e7359a8daa323d30f11996d224c4d52f1ebeb7b84ebc3ceff63d590a05cc4c1eff5265aaf2265a9e7271c5ed814fc7f6ff9ab6b07a073d5b4e30d047b0da2e6d0dcdec9dba7c706f777fc14ea381910a3928f9ce9cf2da41260c153b6cfdc487cf4fead7d37111308bc4aa4b3081457e826c03d02824c1549a760b339f8a39e45730eaccd1e0078d2823b83d6d79e0a50e43e9d03558b943ca0c4776d5f93682b3ce75e95f7079b1e77cec0a037f4d89adb801217386decf6e26d10373b47019444fdd5230b84b708671d18d6b7c3955a89435f0e30236b67c193d22e1d225ba5cc8ae55b91c5712da7ba583532a7b5dd20e857fe8ba1d109342c4737f55cc8a15f1919afc4b2803ca87bae25644899af6a8f499eeaaec69250114c377e43093f9133e606a6d2616fda2cc836ac6ffd022d83d5d618a836c7b94916e73112d3611e3920dd4b37fe2cfc5d3acb2387379c513a2a71937432386732f0815a5f141282ddf310d60fbfb7632792a11d9bcb662fa1e63701605b78681c7001e57eee3aa4ecf1b058a4f02100fd161b0721c0be3f9c6b8c7b5812d8df2ff1b85b46612358d059e0332f215f7baf186e35ab44f2f6446b7c955f0dc2f084fe279fd41d6c2f0424d061f2643a5c46054f52456e71c8b8f93fbeac0f66070229f4117233cf866126fcbff2566b378367f5499c989ff5894886bd6d171507116095", 0xfc0, 0x99, 0x0, 0x1}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000001980)="668443d1d4553cceac50fffefd62dfd4a40e228df3c7ee66df8ac18d8950099cab478395c7f484fd65ede8e50ff392242e58d32f057823beedf29d9d0877125482508ad4f4192ad26ceaf4b3f5b9280dd7428221ce65e84b7d2738f0a3c2a28ea868ca0d9537073bf6bc432d6c07a71c773c0b9b0f80fdf3f18ae17f74861840377f91a28bd900921bc2180d23657c87542ff72f", 0x94, 0x7, 0x0, 0x1}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000680)="9513f72b", 0x4, 0x7, 0x0, 0x3}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x1, r2, &(0x7f0000001b00)="15928f4960013dcc456a6518337553bba2041313253f9eb5ec200696213a3f97fe7c5af8d5541d0cd380d8ece233e50408b23613e84f552a745e63e1b844635f69b1d37201ccabaf2697d1c60c2106ec3fc9225a55316ad09babf68943d7c87a0b8786bab7bcc4757489e67e6cd1a7059037cd8ea5a9b370838317e457d9d7db", 0x80, 0xb083, 0x0, 0x1}]) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) fsetxattr$security_selinux(r5, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r7, 0x1, 0x1) r8 = memfd_secret(0x80000) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r9, 0x1, 0x1) io_submit(r4, 0x6, &(0x7f0000000700)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x5, r5, &(0x7f0000000240)="9caff458cdde8c44a04a232a3459ab2036204ac98634dba4d414e9f26ebd70127fa9ab90c189600facb206d58242501dc0da114effb2aaba0949eb4ee3210223607a55b3176faec14d99eabae9587e30df8d128bc2bf5fc174dc524275803328426261a94b5366fc5abeb2664e4585809385f5e62af65e92d02fbdc2eac2980aefbdf4350da268b91deb2b23d636e8f817fca2f1cde84195a46973c4041bde6e216e4cbb34fc67", 0xa7, 0x6, 0x0, 0x0, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x3f, r1, &(0x7f0000000380)="14f8f485b4fc3bdd07e55643fa7888aa466070caade6c4900685115eb77e078d01db13653e5ce33ee3ff8c98ef3806fc0ae3ca1d18f2f351f91b45296e1aa1128d323ffb6f5cc0dbdb8e7d95ef4cbe79245a2ff31ef5e74d42b074da5deac13ae28738050a5363c25df78b2dc6c3a2fa685d795f512708af1ca4f15012e11bd7f75e6b30424bb2f0c21823d95633d6604f970f53715439a1629fadbd4a263b742367144e2cb409448e814592f305655a76256419aa377fca6a5ad0bc10c78df3", 0xc0, 0x3, 0x0, 0x0, r7}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000480)="fe5e117cea306cc2ef2a9937ba565c609d1c6ef2097db3", 0x17}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x401, r8, &(0x7f0000000500)="6f60e8f1eca487e4dbe0df736e736aa3ff5a9bbd8e1de55ad6e98144a0ecdbb39429562311f5f2e7fe08cab842d96fef3402fa1ce3ba0ea47ffa76e9e62205c431df0cf20f1178b25461d2d6a84d6b5ab39a34791c44b04e8eab1c08dbaf998928048ead1d9816a3cba362d5d2f34ebf5e9af6", 0x73, 0x8, 0x0, 0x3, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f00000005c0)="5c8ef4", 0x3, 0x80, 0x0, 0x2, r9}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000640)="82b98d5cf41990e8a3dfca7f02fc54d45ab4b259c757736e87972eef757144d023e3f3230f636c7b7675269d284d6e3a2ee680319b17580b0cc9b6ab5e48c4edb44931cb3f6efef7d4812becfed9f50b2e6712a0d4d92ac2a72f79c4f32259111b91e10dbd680bcba9b436419596bd5c", 0x70, 0x1, 0x0, 0x1}]) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000140)="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") ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) 16:32:07 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x40, 0x6, 0x9, 0x44, 0x0, 0x1000, 0x12100, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff8000, 0x1, @perf_config_ext={0xddb7, 0x4dbb}, 0x8000, 0x100, 0x8, 0x8, 0x2, 0x1, 0x55ca, 0x0, 0x3, 0x0, 0x3}) write$bt_hci(r1, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:32:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16:32:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xf000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:07 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:32:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:32:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x34000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:32:07 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:32:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:32:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:32:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x68f, 0x2100) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 16:32:07 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x1f}}}, 0x7) 16:32:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x401200, 0x8, 0x17}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) lseek(r3, 0x6, 0x4) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x3, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0, @ANYRESHEX]) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000040)={0x4, 0x7fff, "da3cbf", 0x2, 0x81}) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) 16:32:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:32:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:32:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x80000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2587.204582] Bluetooth: hci1: command 0x0401 tx timeout 16:32:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x2, 0x9, 0xfff, 0x3ff}}}, 0xb) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) 16:32:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:32:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:32:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x88000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:17 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:32:17 executing program 2: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@bcast, @bcast, @netrom, @netrom, @remote, @bcast, @rose]}, &(0x7f0000000080)=0x80) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000000c0)) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) 16:32:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)="23fb26c2d6400b4b2537998183729d9d3c0527a53c6a4beeb3822bcb05407e180ef1480f81dca6c55ec36b86430aa0710992205775c26dbb09f9f6592e8815cd88155a4177b33c4abe75a0db8084a4090b77bfa58362fa97ae0dcdfc9e54936a64de865b230939fe") close(0xffffffffffffffff) 16:32:17 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000000)="f726ee73102c6c2f89849be8510c51948c952400231c639adc2ca0569cb4") 16:32:17 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) [ 2595.293763] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2595.296901] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2596.420636] Bluetooth: hci1: command 0x0401 tx timeout 16:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) 16:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:32:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:26 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) (fail_nth: 1) 16:32:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x400300, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:26 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:32:26 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000000)="e544046ac19d509bfe705a2c1e94779cafe4b588b94f306ba99ff1531c4e171ee84c5ce0568e875efb951a3858e60a3c19b2cb62090369991149d0d3d4a0b6bc91d45c127f1b53da1ece39b4c9fa88ba426f6201203af493fe80c5b38ceecd548d58f940027f8c07309d82cf") r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80080, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r5, 0x9, &(0x7f0000001bc0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x9, r3, &(0x7f0000000540)="034613e1c7bafd199832130e", 0xc, 0x10001, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, &(0x7f00000005c0)="dfb9d4c97a7227296720bf21d53f91cae1a6bab9c17cc5b07d09e122cd37ca032553d23f13cb58b5fbae709c4a6d2a3c8d1dacae643749b3fed5d0a1c5ec41e2c545a29dfa48ef85546fac63aa2d6ad89f2f7b40edf706e62c29648b4ea2c8ec485b90453ea23873c7d48e5202d2d927103f1bc52634d44ed53e325daff94f98c8b4dbfa757933dac71c8e70d51c3569b3787cb306910d0c1055a29d64cf154c53f18e21c97ad7684e821d6a6436d9ff325cc18687f204525aaf01410af4a5", 0xbf, 0x0, 0x0, 0x2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x3, 0x7f, 0xffffffffffffffff, &(0x7f0000000780)="a7997a28cb0aa9e3f32561b0920571c019e914df7466b57f4c6c834b237fe61f90628d2fdc0bba6d2edbf41df55de1d75388cd370f99e5a93750480b196ff39fc3f8ff005130fb3c83c4023254235bf20625b3882c24f0516b4bbc7f03caaae6b37d36a3cdc247f75266fd8bfda4b6e5559915630072c68a17ba94f2ae1a25eabe47b4d20d2fcd346df3e7f47070195fdf97a43fdc6c98860dcd6c3cd5bd3522b6b11d011c38f04eee5d604a", 0xac, 0xffffffffffffc599, 0x0, 0x1}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x2, 0x81, r4, &(0x7f00000008c0)="5fa7622d5ba4244c7bf635da95b4525224f9999ac89c05c8da1fff70dd8e7687cb9afcdf225f5b366a25ae717ee6ad468080055754", 0x35, 0x7, 0x0, 0x1}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="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", 0xfc0, 0x99, 0x0, 0x1}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000001980)="668443d1d4553cceac50fffefd62dfd4a40e228df3c7ee66df8ac18d8950099cab478395c7f484fd65ede8e50ff392242e58d32f057823beedf29d9d0877125482508ad4f4192ad26ceaf4b3f5b9280dd7428221ce65e84b7d2738f0a3c2a28ea868ca0d9537073bf6bc432d6c07a71c773c0b9b0f80fdf3f18ae17f74861840377f91a28bd900921bc2180d23657c87542ff72f", 0x94, 0x7, 0x0, 0x1}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000680)="9513f72b", 0x4, 0x7, 0x0, 0x3}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x1, r3, &(0x7f0000001b00)="15928f4960013dcc456a6518337553bba2041313253f9eb5ec200696213a3f97fe7c5af8d5541d0cd380d8ece233e50408b23613e84f552a745e63e1b844635f69b1d37201ccabaf2697d1c60c2106ec3fc9225a55316ad09babf68943d7c87a0b8786bab7bcc4757489e67e6cd1a7059037cd8ea5a9b370838317e457d9d7db", 0x80, 0xb083, 0x0, 0x1}]) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002e08e1118d653000c3195eca2c520ba51b4776354ed014aedfc2a8044e2efb6691acbc4c4795f746af85853f08bf262c66d601"]) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x4440, 0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000100)="5af982d000fa1e69a15676295251481b62b475f78adad9b90c0a6933f9fe3fe88cc318e4d5a8cdf9889dc399f891c1643f99a4dfe32c5aab585b1b82f5b2bca6f2a105b5d43d18fbad8008d2ac1f1308bedeb44799dcac5438a9573cd90bae94e0b454d7458ed2b27a74aff166ac27f18e78b1ca8389f80c17aa5c12c38e1d84ada8d75ca3dc4bc6c0d5a118d7d7a2ef042f09759dcb3f2b7b96", 0x9a, 0x100000000, 0x0, 0x0, r7}]) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) 16:32:26 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) [ 2604.120369] FAULT_INJECTION: forcing a failure. [ 2604.120369] name failslab, interval 1, probability 0, space 0, times 0 [ 2604.122300] CPU: 1 UID: 0 PID: 20066 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2604.122334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2604.122348] Call Trace: [ 2604.122356] [ 2604.122366] dump_stack_lvl+0xfa/0x120 [ 2604.122405] should_fail_ex+0x4d7/0x5e0 [ 2604.122439] should_failslab+0xc2/0x120 [ 2604.122473] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 2604.122510] ? __alloc_skb+0x2ab/0x370 [ 2604.122534] ? kasan_unpoison+0x27/0x60 [ 2604.122570] ? __alloc_skb+0x2ab/0x370 16:32:26 executing program 5: getgroups(0x1, &(0x7f0000000080)=[0xee01]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="013a0c070676e044fc40bb"], 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) pipe(&(0x7f0000000040)) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x10) [ 2604.122590] __alloc_skb+0x2ab/0x370 [ 2604.122614] ? __pfx___alloc_skb+0x10/0x10 [ 2604.122654] alloc_skb_with_frags+0x8f/0x7c0 [ 2604.122687] ? __pfx_perf_trace_lock+0x10/0x10 [ 2604.122722] ? __alloc_frozen_pages_noprof+0x296/0x1f20 [ 2604.122764] sock_alloc_send_pskb+0x7cb/0x950 [ 2604.122786] ? lock_acquire+0x15e/0x2f0 [ 2604.122818] ? avc_has_perm_noaudit+0x59/0x3d0 [ 2604.122858] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 2604.122899] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2604.122923] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2604.122964] ? sock_has_perm+0x21c/0x2b0 [ 2604.122986] ? __pfx_sock_has_perm+0x10/0x10 [ 2604.123029] hci_sock_sendmsg+0x190/0x2270 [ 2604.123085] ? perf_trace_lock+0xb5/0x5d0 [ 2604.123137] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2604.123185] sock_write_iter+0x57e/0x610 [ 2604.123220] ? __pfx_sock_write_iter+0x10/0x10 [ 2604.123271] ? security_file_permission+0x22/0x90 [ 2604.123313] vfs_write+0xbe9/0x1150 [ 2604.123346] ? __pfx_sock_write_iter+0x10/0x10 [ 2604.123379] ? __fget_files+0x34/0x3b0 [ 2604.123407] ? __pfx_vfs_write+0x10/0x10 [ 2604.123463] ksys_write+0x1ef/0x240 [ 2604.123493] ? __pfx_ksys_write+0x10/0x10 [ 2604.123535] do_syscall_64+0xbf/0x390 [ 2604.123573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2604.123598] RIP: 0033:0x7fb4eed3bb19 [ 2604.123616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2604.123642] RSP: 002b:00007fb4ec2b1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2604.123665] RAX: ffffffffffffffda RBX: 00007fb4eee4ef60 RCX: 00007fb4eed3bb19 [ 2604.123681] RDX: 0000000000000007 RSI: 0000000020000040 RDI: 0000000000000004 [ 2604.123696] RBP: 00007fb4ec2b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2604.123710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2604.123725] R13: 00007fff515a428f R14: 00007fb4ec2b1300 R15: 0000000000022000 [ 2604.123760] 16:32:26 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:32:26 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) (fail_nth: 2) [ 2604.213593] Bluetooth: hci2: Opcode 0x0c20 failed: -4 16:32:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="eb98fc2e823073886e5ddc2e7e4ad9f1000000000000ceef6c2ddc54c72326147c3f7de95168d3fceac95009480291c19a7ae84846bf0fdd2ec8ec1880888a45b03746896ce9519dd0cd6dc9794d9b1ac6e673add5b5b49d73f17a477591b5753b9ca13208df5e8fb35925d940dcf4de2d1deb0253000000776046f9b6d88c945aa07aa80136cc3ca4a904d32ddc258a7d406f654195580b5c61a51d2958a362b26ddada7dadc734b25a35718e4f7133d158c7ca3a2abfda3705eedff70000000000008160d84535c1da2869e5c069da6200fda29cfa0484dfdf5162ecf3252a1bb89f") setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000140)="d110a4b9e03aab9e7f105c31503c2c5969d6b098ed129ff12b9c276099dbb405b45145c4f7a35206a824301a6cac149e40618bd64fef3178dc12544e6dcd5e0672a2833d72dfb3d0329cf776d3e0da91f4f5672d56dabe47d96a8033f319cae04a730fe81384ae8a05e5fbe6dddfdc71053ed217b4f41447d27f0c520bc9514931db64385d6475b9dedf0f6cf9ff1e76d597a8b46aa785f180b0d91dc648e5572b01da") 16:32:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:32:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") [ 2606.212539] Bluetooth: hci2: command 0x0406 tx timeout [ 2606.468590] Bluetooth: hci1: command 0x0401 tx timeout 16:32:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:32:35 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) (fail_nth: 3) 16:32:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x800800, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:35 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:32:35 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x81, 0x4) 16:32:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:35 executing program 2: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6000, 0x80, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000180000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r4, r5, r6, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001c40)=0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000280)="47eeadfc5a298f6a1791823db696d2bd3d8ae50272d84c19455ab6d26f68e1f6d2d49ed47ab1cc7b823d441adca86bd07722071a0291e6a259ba5d31b32ba9f2fcd1a54a81091eef382b08c8ebaf46775e49be9d74b5c364028a2ab7ba0a8bd91af135e9caffd446e6f1ad4f746167dd7f97bc4720985d3cf1d6d68f95ace6997033d25cc445e7a2a95d58d8ac40b85a262a567ca98fc89535c60a31f88456f4080945dda4b5497e7f6daefd2095e3042a52832e46dc27687a7b51237e971e6880855641e85343e36625e9cfa86e8f3ecf96c379726b94f5d3c731fcef86c7ded57ce9ed588e7055cf924dd090a01f714ae554e11e", 0xf5}, {&(0x7f0000000380)="d87cb467c8ed8107c655d032d4db6fce0809adab249c2dd762154db36efcacccddf645536f528e49911d6477f6684079701f19fdacd9e914e9eb9e7e1fedc1b58f07ebce1fc2a451ae56ff79204163fe574ecea5033338fbfdc622ef7b5d6d574d9ca0c2a7cabeb3715e6735720c5d77cfaa0f1b386ae3a89f62d78c15cbd910533491b2103f045b08740fcfec548bd604ca7ea5d8e18b8ee61751290edaa295fdab1455c4ee2e01279baf3ae745c818952da7ddb7e32d05c1cb0174ed7a1ada5489ac4e89d5ab95010798b88b852b6144058c1e2ac5a46446b8207f", 0xdc}, {&(0x7f0000000480)="b7e52c76d3e1ec0674dd1322df0a6673a880897b29ea8d0127c5b8fb1868aa08ed913d645ead54397455133391542fe76b1f1bdfa4155368776924d0d43d43194f6c7c1ef39f3f2c6c7739b5a8a3aaef3a523c67babe1cd7ce", 0x59}, {&(0x7f0000000500)="1c37b34abf274e841ef5bd8a", 0xc}, {&(0x7f0000000540)="55052f36ce9917f027b31f0c1b4d0d41e9795d17fa7d7a8a96577e8c2880eaaac27c180bc884e9d0d956597a88fc3d5660da0dbf26a3d2857c7f841960b67c3d37513ee2475c4d984e6d5a7b0f7b7e108e1161d3f6e49062fb31d181d487608b61d3322cc9dac00674ff040b668c4ae63824efaaaacaa2bfe561e743bc47f7f7b5cb73c1c000cb01d920b0f1b22b2dbd4eb950e8c11c381b9521cb115f15981915e5c4588d03143e04221399472c9f3390cc6ed3fba96e8bbb74ae40810a300a96a0ceb228", 0xc5}, {&(0x7f0000000640)="3a84f4905864c7d8427a6d7c9761e7703f5d3b33bce9fdbf65b92880278075564bc6622f7dfb023bb2271338a0c2028339564186faac4bef1365aba8091a51", 0x3f}, {&(0x7f0000000680)="bf142fd4d808a673bf2713a715cb58f0a1a013e1", 0x14}, {&(0x7f00000006c0)="bd54cde602862836baf4ab648b95375d3179c5d7a57b2e2349a9e7c41919a2cd57424d3896c2eb8329586d2e49a11abc563f0097d66338666e2fffcdbed27d89ae53c4d14e325e07ff65097dd14d827bdd30a084177760c91cc9c3bed7ebb21bab304c227974b2da1ecccbeb5baace84ca974c", 0x73}, {&(0x7f0000000740)="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", 0x1000}], 0x9, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {0x0, r0, r4}}}], 0x20, 0x8000}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001840)="eabb4e7a68af6c6beba91d3f663f19cc741911a088fa3ad2fa244d2afe14707e554831c0b154013339366b831132eec2", 0x30}, {&(0x7f0000001880)="ccb63947bd9caa7513105e7865bdec2ae39c688d0e9b", 0x16}, {&(0x7f00000018c0)="cd48cb4a0792a5da3b2c0e3163f7dd52567de402bfe85b7a40ae84fcab5cacb1ea71cb9b589351f6b27d2ffa37661cbb4417abe7640a4374883330828bae400c95aec0cd7582af187089816ee6f13df72c882186c4ee8ab00ee73d20a5de70c2c18020c8c45e3eb82886e983f703bcbdb03027b9ae725587f82c3891cea2", 0x7e}, {&(0x7f0000001940)="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", 0xfe}, {&(0x7f0000001a40)="149df336df799d4d6c1dfc98ad302092fcc16df8f3b752cd6aeac4953a1aac99de63695467a76dcd772960c40fa5bc2364785dc5cd28e8f58975fdad23fe24d0f3ccfb9f361744afba7c356fd3686ac5903f0ad435c2cbba58bf89d16c3659d7e06a94b4b748b2ab181207fd757c78fe54932ebc407f2cb6147461494a0fbdf4115f0734cb548a7b0af88f9e3c3d013a3223c956a17e63a6e711c8abafd987c31d7d0c1bc6b82481dda9e26f179d781ef1456f992fb21ccd93548485e3", 0xbd}, {&(0x7f0000001b00)="9841acbbd7f08787c1e8484549af3cf88ae7e229675c25f254891026e0c3be6ea99079366ab731388efbefc5fd77383c54d2ffcdbcbc2f7fdd41efe578937015b6a4e5c4bb26c80a49dc493b5b3dfc17a479a837aa67adcdcff7cb3da542dee15f71431c116441d33c51dc028d67a2ce1fa3", 0x72}, {&(0x7f0000001b80)="758eabed1c", 0x5}], 0x7, &(0x7f0000001c80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r1}}}], 0x40, 0x4040800}}], 0x2, 0x84) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f00000000c0)="13a533f378c8d8a7ce484cdea84ca71e57b1155dad5b01b6fcec42ed48cc7584e38b7bf6625d7a030b6e3ee09e731546f46a9c384f00f7e0d286eaa8afcdc2f82e0fd56590d50a3ea08cb415b2fcdd45355c3f4f39dc8b10cd07470d46de379a292f02057301c550e9114497e49f448c1b91f308138ab6b3f7ed9d7b5fe6e27e2f7b517a7d3c6dd211ddc49955e3c94e3d73112e") 16:32:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:32:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xf0ffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:35 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) (fail_nth: 4) [ 2615.300674] Bluetooth: hci1: command 0x0401 tx timeout 16:32:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) 16:32:45 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:32:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:32:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000080)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) 16:32:45 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) (fail_nth: 5) 16:32:45 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) [ 2622.984191] FAULT_INJECTION: forcing a failure. [ 2622.984191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2622.986073] CPU: 1 UID: 0 PID: 20148 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2622.986105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.986119] Call Trace: [ 2622.986127] [ 2622.986136] dump_stack_lvl+0xfa/0x120 [ 2622.986174] should_fail_ex+0x4d7/0x5e0 [ 2622.986206] _copy_from_iter+0x1dc/0x1660 [ 2622.986308] ? lock_acquire+0x15e/0x2f0 [ 2622.986341] ? __virt_addr_valid+0x1c6/0x5d0 [ 2622.986366] ? find_held_lock+0x2b/0x80 [ 2622.986392] ? __pfx__copy_from_iter+0x10/0x10 [ 2622.986416] ? lock_release+0xc8/0x290 [ 2622.986453] ? __virt_addr_valid+0x100/0x5d0 [ 2622.986478] ? __check_object_size+0x579/0x880 [ 2622.986518] hci_sock_sendmsg+0x402/0x2270 [ 2622.986558] ? perf_trace_lock+0xb5/0x5d0 [ 2622.986594] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2622.986640] sock_write_iter+0x57e/0x610 [ 2622.986676] ? __pfx_sock_write_iter+0x10/0x10 [ 2622.986725] ? security_file_permission+0x22/0x90 [ 2622.986766] vfs_write+0xbe9/0x1150 [ 2622.986799] ? __pfx_sock_write_iter+0x10/0x10 [ 2622.986831] ? __fget_files+0x34/0x3b0 [ 2622.986860] ? __pfx_vfs_write+0x10/0x10 [ 2622.986915] ksys_write+0x1ef/0x240 [ 2622.986944] ? __pfx_ksys_write+0x10/0x10 [ 2622.986985] do_syscall_64+0xbf/0x390 [ 2622.987023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2622.987047] RIP: 0033:0x7fb4eed3bb19 [ 2622.987077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.987100] RSP: 002b:00007fb4ec2b1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2622.987124] RAX: ffffffffffffffda RBX: 00007fb4eee4ef60 RCX: 00007fb4eed3bb19 [ 2622.987140] RDX: 0000000000000007 RSI: 0000000020000040 RDI: 0000000000000004 [ 2622.987154] RBP: 00007fb4ec2b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2622.987168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2622.987182] R13: 00007fff515a428f R14: 00007fb4ec2b1300 R15: 0000000000022000 [ 2622.987217] 16:32:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x2000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="aa857a962f585b1bfd3aabbd1d64a1ec0cf275e74503384d6fb6b8b2f0319e210c6721ea86") ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0xffff, "b99345", 0x6, 0x1}) bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0x1, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r0, 0x2, 0x3) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x180800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000280)={0x0, 'veth0_vlan\x00', {0x2}, 0x1000}) lseek(r1, 0x7, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000080)="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") 16:32:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:32:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f00000000c0)) write$bt_hci(r0, &(0x7f0000000000)={0x1, @role_discovery={{0x809, 0x2}, {0x1}}}, 0x6) 16:32:45 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:32:45 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) (fail_nth: 6) 16:32:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) [ 2623.277007] FAULT_INJECTION: forcing a failure. [ 2623.277007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2623.278278] CPU: 0 UID: 0 PID: 20171 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2623.278299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2623.278309] Call Trace: [ 2623.278314] [ 2623.278320] dump_stack_lvl+0xfa/0x120 [ 2623.278347] should_fail_ex+0x4d7/0x5e0 [ 2623.278369] _copy_to_user+0x32/0xd0 [ 2623.278390] simple_read_from_buffer+0xe0/0x180 [ 2623.278411] proc_fail_nth_read+0x18a/0x240 [ 2623.278434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2623.278456] ? security_file_permission+0x22/0x90 [ 2623.278480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2623.278506] vfs_read+0x1eb/0xc70 [ 2623.278530] ? __pfx_vfs_read+0x10/0x10 [ 2623.278554] ? lock_release+0xc8/0x290 [ 2623.278578] ? __fget_files+0x20d/0x3b0 [ 2623.278666] ksys_read+0x121/0x240 [ 2623.278684] ? __pfx_ksys_read+0x10/0x10 [ 2623.278710] do_syscall_64+0xbf/0x390 [ 2623.278735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2623.278751] RIP: 0033:0x7fb4eecee69c [ 2623.278763] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2623.278777] RSP: 002b:00007fb4ec2b1170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2623.278792] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fb4eecee69c [ 2623.278802] RDX: 000000000000000f RSI: 00007fb4ec2b11e0 RDI: 0000000000000003 [ 2623.278811] RBP: 00007fb4ec2b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2623.278820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2623.278828] R13: 00007fff515a428f R14: 00007fb4ec2b1300 R15: 0000000000022000 [ 2623.278851] 16:32:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x3000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x14040, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="05000000000000002e2f66696c65300089231216cadc73301d709869fd2be51e3114efd86e53743510779c66047a83a706daf29783e43eda7669e6e24580f2166edebfc2"]) bind$bt_hci(r2, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x6) [ 2625.285583] Bluetooth: hci1: command 0x0401 tx timeout 16:32:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:32:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:32:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x4]}, 0x8, 0x80000) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x101000, 0x200) write$bt_hci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/414], 0x2a) 16:32:59 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:32:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f00000020c0)="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") ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) write$bt_hci(r0, &(0x7f0000000100)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0xa88a}}}, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0)=0x200, 0x4) 16:32:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:32:59 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:32:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) shutdown(r1, 0x0) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) fsetxattr$security_selinux(r3, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$FIOCLEX(r3, 0x5451) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 16:32:59 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000100)="7855a92ca3e58d55a61934528a48492ca1ba0276f8cb519500c058a57d783c3325331959a02924d20a6dc808cde2b2a54f973d7ef26a25a61a5d221fb2b995a32b7138518f76ec0f3f6cd7459195f2be070f532e0be7049a159e13c972f73d1f6d2f0e386467d33b43e1450b6aedeb1eff00000000000000000000000000000000b8d343057fdf559cb4ee5cf694e40907a26f777683fedb810329e9f0c9e144a0ea169bbe2268fae4fbaa9790c23c7b9c3c7ec4fec85363c0ee07967d349520014e760044") ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) 16:32:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:32:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) [ 2638.404664] Bluetooth: hci1: command 0x0401 tx timeout 16:33:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:33:09 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:33:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:33:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/breakpoint', 0x0, 0x80) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x1, 'team_slave_0\x00', {}, 0x3}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x2, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000000)="c137e351975b1f2a83fe8e72267ee0c3797fe72f42f395270278a0a5f75b151355787e2dd94573d52533eb57085afc42be2b16c5c52cca91b1a793a1f5e001f0fdfc8cdad5d5964eae604f4668acb4a78945f8c87662baa818cbda30c5b8b60cac069f24a2a71f9e797726454319566618f8cf750bbedfac") 16:33:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x4e23, @multicast1}, @generic={0x26, "ae3f0e672a75bed7c177a012dc5c"}, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x78, 0x1ff, 0x3}) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) 16:33:09 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:33:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:33:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:33:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8060000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="5e000001000000002e2f6ef46c6530004e7ca7f709a21659c85bc3911880f2ddd26a9a979fe9a44812001b3a232f7904b6961c87f949b00d7c2aef152f42cc2140f75168c240735c66fdb94b06807bd7d426982d7166af14450dedbd7e7aa124b7d18326d66701b48d8857c1ea0138bee5e0cddc0bc745a71f73a531b1134b"]) write$bt_hci(r4, &(0x7f00000003c0)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="016420062963450f4afc5e3820090000000000f50700371c58946d362f6a65461c96a1484a472b652372ea44ba3505010000801b0000000cc1763b87ff5c041aa8bf3ab66ac88993ea5d32ee4901005b6d3fae2220073232a6a89ea3e9e6c486fd0228d08b01000000000000003db1fe0182c9f0fbd9ab7eb3874d837b258ba5c071d630c20d2af5304ab13f89ab55ff0cc4c48c5765ccd758fee57a44200882b57dc6fb83e65f0ebe501d70682370d799655c650f2eb627c2e6b4000adc996e6d9cfd3f5082f090377bfd0e"], 0xd) fsetxattr$security_selinux(r1, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x48000) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1502, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) fchmod(r6, 0x15) ioctl$sock_bt_hci(r5, 0x400448cb, &(0x7f0000000040)="40c1ef1f15ef20cc3a91427745c24911b38cd5e8e2a119bad41e3ccab7931a3a47d3d66f1cef5587ccb83cf0a3549b283733c35c45c96994be6814feb40b9caf4f08cdc5658fbfe758dfd8606ea7b3830c068931c2f5faa4dc7d34e8493b9ba7516cab5442060fca9f6f44c6f559490d383014561538dfc8e93be214c2c9732de957eac51fc8c64469088b532d7622eabbab1f4cdd58d55c96ee868154c363b0") 16:33:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) [ 2647.122223] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 2647.128975] audit: type=1400 audit(1761928389.907:26): avc: denied { relabelto } for pid=20248 comm="syz-executor.2" name="HCI" dev="sockfs" ino=55668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=bluetooth_socket permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 2647.682087] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2647.685242] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2647.881308] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2647.883039] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2649.092653] Bluetooth: hci2: command 0x0406 tx timeout [ 2651.140707] Bluetooth: hci2: command 0x0406 tx timeout 16:33:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:19 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:33:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:33:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:33:19 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x5}}}, 0x7) 16:33:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xb000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000240)="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") 16:33:19 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:19 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:33:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xe000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:19 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0xc9, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:33:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) fsetxattr$security_selinux(r2, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$bt_hci(r1, &(0x7f00000013c0)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) fsetxattr$security_selinux(r3, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001340), 0x400000, 0x0) ioctl(r4, 0x8, &(0x7f0000001380)="a590a14097af400fa688fb3c4dc7264099d86960c3d3378191a90dd357") io_submit(0x0, 0x3, &(0x7f0000001300)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x2, 0xc128, r0, &(0x7f0000000100)="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", 0x1000, 0x6, 0x0, 0x1}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x1ff, r2, &(0x7f0000001140)="f0297e6dcd9d91854eb8299afd09e7639b7444ed05cd3ff4be731ba5ae5840ad5af4e9e169a88085158d80679141fee6b230a9c34c33739cef70b6555741bc3dfd6bea6efbe64fd12de167f7d606be36e6389f742020309bdfbe3b04a964c82476f28197d6e375c3db1755ac3e6720aa73a4a89b9fa3e869ec187dce3c96fc469ba8112ac5a4bfe7774122ecd7fbd7ba2f901ba35dc0c048b1ee4e214e719b73257524e7283ea0507ee6db61c741eff9f38a9ce2fc67f3", 0xb7, 0xfffffffffffffff8, 0x0, 0x1}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000001240)="57d29a010647158b654f4b584b3c242ff12078ecfabb6f90924787d5f298476922784e3af250257bc3591fd475a54870f4949afc4d7bfa17d75484ee362bd29c99c5af99c737107fb132cab33e1aa7e87821b94aca1a4706099114ceb9c08574c300fd0fc7bed9e44a039675d574362cd6c01926502ffa0ae08f2b0541", 0x7d, 0x3}]) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000000)="87e9aca5a2f54f2ab1072ed1d015397bfd8e768232cb29b88c9517bb8a36838f784fe91a7c4e48d11ea4b937d939486fbd425443b14e78d4056785e060a065fb688a21b2f6f62b23ff282559b58c37eb4b4068282a3b3916c48ec39b6b70f34d3bca3d489ca74c501f8eed64cc8e9fe0d98ceb27e937b5ce1214a77654ef2539ebc5b3d016827af292b2c1dc538f2d4fec67dc427d4531be5f58ae10a4dc70ad2f5732123107f7e745669b148480727969ca27662d1837641c2eef8b4c0e83a6f2a69505a5b2d6c54f") 16:33:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:19 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:33:19 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) [ 2659.012576] Bluetooth: hci1: command 0x0401 tx timeout [ 2661.060821] Bluetooth: hci1: command 0x0401 tx timeout [ 2663.108740] Bluetooth: hci1: command 0x0401 tx timeout 16:33:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4f93b0b59d3fe5fac266a57ec0466761a2bb77fca208278a0d5f468add292814ac7700000000fab1bd0405b40006dff722db936a30827b0d9335f5d5ae1a1931665af2dc0483c12633eb763b4bb9273669bc579b4cab54c8c47ebd88090000001bcfda9a"], 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x4400) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000100)="fcc576a926f0d934b60fafc7619100ce111e4ba40801f7056da22b4e74da49e6f3e840eb9624d7720daec4489c585a500379ed63e23053e28c554cb6b1d327b4ee5b000f14d33cb4bf2fb7fda0294901c267bff84fa114dea03e0ae2d646c5e962acd300"/111) 16:33:28 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x2}}}, 0x7) 16:33:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x43050000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:33:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:28 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0x0) 16:33:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:33:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) 16:33:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x60000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2667.780557] Bluetooth: hci1: command 0x0401 tx timeout [ 2669.828673] Bluetooth: hci1: command 0x0401 tx timeout 16:33:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x65580000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)="7c108d6313b98052df303759d994086b922b151995a3af3a49e19cbf43ebe9dc47241ca579b7279343e3b6ff50d1e7a7521963fcbf8278337a0f1bf3f382e00c16beda27386cda0e9982edc89236ce9b6e2be5634986951c74c72f543e3a8a2b3fdc484cbf30be5a2cf644286edf49cd1ce458e183afdbb6ea3e57e31c29bee2647735620ba4130f0a35862415ad4d000bbf868bad888919622be067f2e3137b29c10b9a188ddfd529a95a128ed5ffa7c424751addcad92b16dcb06ef2f17cebbf579a2c3f682ea3d44a292c90733fc6a750696093519ee532222b1bed0ab6feb5ed93bbea56bbec640901319beba7") 16:33:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x4}}}, 0x7) 16:33:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:33:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)="4dbabe879dafb5035c81a9c03c3e96d85b51b601ed71e8a59640a30a9eecd5d6722dcb65df1323f46bd0117c69b7a32840f5641c768799914c966581434e7356c2aafb29b00a6cc9487a249d117e5b2361f6d91771b05abba493a31f78e515be3bc6e3ba7a8879026df79e08ae73781c0f6dd27537f83f056422d89f553f49a394c356fe1591518263ea8d5642c9afd8c35c") 16:33:38 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0x0) 16:33:38 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:33:38 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x80350000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 16:33:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x5}}}, 0x7) 16:33:38 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0x0) 16:33:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x4964) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x6d17}}, './file0\x00'}) 16:33:38 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:33:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x81000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 16:33:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x10000, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1e3a02, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x82) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0)=0x80, 0x1) 16:33:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x86ddffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2677.380764] Bluetooth: hci1: command 0x0401 tx timeout [ 2679.428731] Bluetooth: hci1: command 0x0401 tx timeout [ 2681.476579] Bluetooth: hci1: command 0x0401 tx timeout 16:33:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x88470000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 16:33:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:33:47 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0x0, 0xb7, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:33:47 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:47 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x6}}}, 0x7) 16:33:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) lseek(r0, 0x7, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000000)={0x2, 0x0, @status={[0x0, 0x8001, 0x1, 0x2, 0x6, 0x9]}, [0x3, 0x6, 0x4, 0x3, 0xff, 0xffffffffffffffe0, 0x0, 0x2, 0x3, 0xae0c, 0x0, 0x7, 0xbb7, 0x26, 0x12, 0x5, 0x4, 0x8001, 0xf3b5, 0xdd0a, 0x8, 0x7f, 0x1ff, 0x8001, 0x0, 0x1, 0x2, 0x200, 0x3, 0x4, 0x1, 0x9, 0x800, 0x7e, 0x7, 0x36f, 0x0, 0xfff, 0x1, 0x1e70, 0x1, 0xf3, 0x6, 0x0, 0x10000000, 0x2, 0x694b, 0x7f, 0x3, 0x0, 0x2, 0x1f, 0x800, 0x6, 0x2, 0x2, 0x10000, 0x9, 0x1f, 0x584, 0x1, 0x2, 0x1, 0x6]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f00000000c0)) 16:33:48 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:48 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0x0, 0x0, 0xc, "912f257914d4344ed109da"}}}, 0x12) 16:33:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)) [ 2687.364570] Bluetooth: hci1: command 0x0401 tx timeout [ 2689.412660] Bluetooth: hci1: command 0x0401 tx timeout 16:33:56 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x8}}}, 0x7) 16:33:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:33:56 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0xe}, {0x0, 0x0, 0x0, "912f257914d4344ed109da"}}}, 0x12) 16:33:56 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000000c0)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x64, "e153b5", 0x0, 0xc9}) 16:33:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x88480000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="5e000001000000002e2f6ef46c6530004e7ca7f709a21659c85bc3911880f2ddd26a9a979fe9a44812001b3a232f7904b6961c87f949b00d7c2aef152f42cc2140f75168c240735c66fdb94b06807bd7d426982d7166af14450dedbd7e7aa124b7d18326d66701b48d8857c1ea0138bee5e0cddc0bc745a71f73a531b1134b"]) write$bt_hci(r4, &(0x7f00000003c0)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="016420062963450f4afc5e3820090000000000f50700371c58946d362f6a65461c96a1484a472b652372ea44ba3505010000801b0000000cc1763b87ff5c041aa8bf3ab66ac88993ea5d32ee4901005b6d3fae2220073232a6a89ea3e9e6c486fd0228d08b01000000000000003db1fe0182c9f0fbd9ab7eb3874d837b258ba5c071d630c20d2af5304ab13f89ab55ff0cc4c48c5765ccd758fee57a44200882b57dc6fb83e65f0ebe501d70682370d799655c650f2eb627c2e6b4000adc996e6d9cfd3f5082f090377bfd0e"], 0xd) fsetxattr$security_selinux(r1, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x48000) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1502, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) fchmod(r6, 0x15) ioctl$sock_bt_hci(r5, 0x400448cb, &(0x7f0000000040)="40c1ef1f15ef20cc3a91427745c24911b38cd5e8e2a119bad41e3ccab7931a3a47d3d66f1cef5587ccb83cf0a3549b283733c35c45c96994be6814feb40b9caf4f08cdc5658fbfe758dfd8606ea7b3830c068931c2f5faa4dc7d34e8493b9ba7516cab5442060fca9f6f44c6f559490d383014561538dfc8e93be214c2c9732de957eac51fc8c64469088b532d7622eabbab1f4cdd58d55c96ee868154c363b0") 16:33:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:33:56 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:33:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2693.361593] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 2693.371088] Bluetooth: hci0: Opcode 0x0401 failed: -22 16:33:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x88640000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:33:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0x0) [ 2693.388595] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 2693.396532] Bluetooth: hci0: Opcode 0x0401 failed: -22 16:33:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:33:56 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x500}}}, 0x7) 16:33:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0x0) 16:33:56 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_phy_link={{0x435, 0x3}}}, 0x7) 16:33:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x888effff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2694.162554] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2695.364555] Bluetooth: hci1: command 0x0401 tx timeout [ 2695.428568] Bluetooth: hci2: command 0x0406 tx timeout [ 2697.412642] Bluetooth: hci1: command 0x0401 tx timeout [ 2699.460639] Bluetooth: hci1: command 0x0401 tx timeout [ 2701.508692] Bluetooth: hci1: command 0x0401 tx timeout 16:34:05 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="5e000001000000002e2f6ef46c6530004e7ca7f709a21659c85bc3911880f2ddd26a9a979fe9a44812001b3a232f7904b6961c87f949b00d7c2aef152f42cc2140f75168c240735c66fdb94b06807bd7d426982d7166af14450dedbd7e7aa124b7d18326d66701b48d8857c1ea0138bee5e0cddc0bc745a71f73a531b1134b"]) write$bt_hci(r4, &(0x7f00000003c0)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="016420062963450f4afc5e3820090000000000f50700371c58946d362f6a65461c96a1484a472b652372ea44ba3505010000801b0000000cc1763b87ff5c041aa8bf3ab66ac88993ea5d32ee4901005b6d3fae2220073232a6a89ea3e9e6c486fd0228d08b01000000000000003db1fe0182c9f0fbd9ab7eb3874d837b258ba5c071d630c20d2af5304ab13f89ab55ff0cc4c48c5765ccd758fee57a44200882b57dc6fb83e65f0ebe501d70682370d799655c650f2eb627c2e6b4000adc996e6d9cfd3f5082f090377bfd0e"], 0xd) fsetxattr$security_selinux(r1, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x48000) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1502, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) fchmod(r6, 0x15) ioctl$sock_bt_hci(r5, 0x400448cb, &(0x7f0000000040)="40c1ef1f15ef20cc3a91427745c24911b38cd5e8e2a119bad41e3ccab7931a3a47d3d66f1cef5587ccb83cf0a3549b283733c35c45c96994be6814feb40b9caf4f08cdc5658fbfe758dfd8606ea7b3830c068931c2f5faa4dc7d34e8493b9ba7516cab5442060fca9f6f44c6f559490d383014561538dfc8e93be214c2c9732de957eac51fc8c64469088b532d7622eabbab1f4cdd58d55c96ee868154c363b0") 16:34:05 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x600}}}, 0x7) 16:34:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x1, 0x1, "f3d308", 0x5, 0x4}) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x101101, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f0000000080)="aa40c5a1657fb0a91abfc8ea2920db45d26d0f01e9bd175ca9a459c014d81fd90d3567f1a0dca2c1891a17296aaef063e9f6432b4fd9b3e38ad5362b8458f259ab009dd44aec5d405c4ae86202a5cdc36d8bad8b0fa372899e6eaecbbe28962345ec5848169ddb14152e32ba48cc7b") 16:34:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0x0) 16:34:05 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0x0) 16:34:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x88a8ffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:05 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:05 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) [ 2703.871285] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2703.914792] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 2705.092696] Bluetooth: hci2: command 0x0406 tx timeout [ 2705.092711] Bluetooth: hci1: command 0x0401 tx timeout [ 2707.140659] Bluetooth: hci1: command 0x0401 tx timeout [ 2709.188595] Bluetooth: hci1: command 0x0401 tx timeout [ 2711.236610] Bluetooth: hci1: command 0x0401 tx timeout 16:34:15 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0x0) 16:34:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x6, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:34:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x2}}}, 0x7) 16:34:15 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendto$packet(r0, 0x0, 0x608, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="5e000001000000002e2f6ef46c6530004e7ca7f709a21659c85bc3911880f2ddd26a9a979fe9a44812001b3a232f7904b6961c87f949b00d7c2aef152f42cc2140f75168c240735c66fdb94b06807bd7d426982d7166af14450dedbd7e7aa124b7d18326d66701b48d8857c1ea0138bee5e0cddc0bc745a71f73a531b1134b"]) write$bt_hci(r4, &(0x7f00000003c0)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="016420062963450f4afc5e3820090000000000f50700371c58946d362f6a65461c96a1484a472b652372ea44ba3505010000801b0000000cc1763b87ff5c041aa8bf3ab66ac88993ea5d32ee4901005b6d3fae2220073232a6a89ea3e9e6c486fd0228d08b01000000000000003db1fe0182c9f0fbd9ab7eb3874d837b258ba5c071d630c20d2af5304ab13f89ab55ff0cc4c48c5765ccd758fee57a44200882b57dc6fb83e65f0ebe501d70682370d799655c650f2eb627c2e6b4000adc996e6d9cfd3f5082f090377bfd0e"], 0xd) fsetxattr$security_selinux(r1, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x48000) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1502, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) fchmod(r6, 0x15) ioctl$sock_bt_hci(r5, 0x400448cb, &(0x7f0000000040)="40c1ef1f15ef20cc3a91427745c24911b38cd5e8e2a119bad41e3ccab7931a3a47d3d66f1cef5587ccb83cf0a3549b283733c35c45c96994be6814feb40b9caf4f08cdc5658fbfe758dfd8606ea7b3830c068931c2f5faa4dc7d34e8493b9ba7516cab5442060fca9f6f44c6f559490d383014561538dfc8e93be214c2c9732de957eac51fc8c64469088b532d7622eabbab1f4cdd58d55c96ee868154c363b0") 16:34:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) lseek(r0, 0x7, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f00000000c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x20000000000007, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) 16:34:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x88caffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:34:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x1, 0x1, "f3d308", 0x5, 0x4}) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x101101, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f0000000080)="aa40c5a1657fb0a91abfc8ea2920db45d26d0f01e9bd175ca9a459c014d81fd90d3567f1a0dca2c1891a17296aaef063e9f6432b4fd9b3e38ad5362b8458f259ab009dd44aec5d405c4ae86202a5cdc36d8bad8b0fa372899e6eaecbbe28962345ec5848169ddb14152e32ba48cc7b") 16:34:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:34:15 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x40, 0x20, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:34:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x4}}}, 0x7) 16:34:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0xc2, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:34:15 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f00000000c0)) 16:34:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x88f7ffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x7, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) [ 2713.178453] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2713.211666] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 2714.372669] Bluetooth: hci2: command 0x0406 tx timeout [ 2714.373861] Bluetooth: hci1: command 0x0401 tx timeout [ 2716.420760] Bluetooth: hci1: command 0x0401 tx timeout [ 2718.468662] Bluetooth: hci1: command 0x0401 tx timeout 16:34:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000080)="5ca3a07d45b024a7410633007b99ac47f2bc037a1a20859e82396f7dbc9675626375a28f533c9d34a18dd1ce6c0c0a46757151a5750099a071748fffba6ae3708641c260b1fb17d6ee24650846857c1e789eab3736f18ed0f858ecd9cee1ad6e432f6c0ffa100294d50ec68c431212cb371955c9f0fcfd57aff68961c515e3c68f2623e6a5b78823252d5e5f2d2c21b07381bd650101096be3b4769023a890fdde94cbd055a57685de") ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000040)="0000008000000000146e") 16:34:27 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x5}}}, 0x7) 16:34:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="5e000001000000002e2f6ef46c6530004e7ca7f709a21659c85bc3911880f2ddd26a9a979fe9a44812001b3a232f7904b6961c87f949b00d7c2aef152f42cc2140f75168c240735c66fdb94b06807bd7d426982d7166af14450dedbd7e7aa124b7d18326d66701b48d8857c1ea0138bee5e0cddc0bc745a71f73a531b1134b"]) write$bt_hci(r4, &(0x7f00000003c0)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="016420062963450f4afc5e3820090000000000f50700371c58946d362f6a65461c96a1484a472b652372ea44ba3505010000801b0000000cc1763b87ff5c041aa8bf3ab66ac88993ea5d32ee4901005b6d3fae2220073232a6a89ea3e9e6c486fd0228d08b01000000000000003db1fe0182c9f0fbd9ab7eb3874d837b258ba5c071d630c20d2af5304ab13f89ab55ff0cc4c48c5765ccd758fee57a44200882b57dc6fb83e65f0ebe501d70682370d799655c650f2eb627c2e6b4000adc996e6d9cfd3f5082f090377bfd0e"], 0xd) fsetxattr$security_selinux(r1, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x48000) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1502, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) fchmod(r5, 0x15) 16:34:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0xfe00, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:34:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x88fbffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:34:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) close_range(r0, r0, 0x2) 16:34:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x89020000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:27 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x6}}}, 0x7) 16:34:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0xf801, 0x7, 0x8}}}, 0x1d) [ 2725.162238] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2726.340636] Bluetooth: hci1: command 0x0401 tx timeout [ 2726.404705] Bluetooth: hci2: command 0x0406 tx timeout [ 2728.388598] Bluetooth: hci1: command 0x0401 tx timeout [ 2730.436646] Bluetooth: hci1: command 0x0401 tx timeout [ 2732.484615] Bluetooth: hci1: command 0x0401 tx timeout 16:34:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') write(r1, &(0x7f0000000040)="a15e77f6d8de07f1cb231f88db7f645b818149e14a8db9f2ad715feb56c0", 0x1e) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f00000000c0)="00a34ed6d9a99ed6d3b2f8343c3d0f3d7270738269d1317daa1e56559644f9d76d2c446d45b937e1c41ebef4e56c71a7bdfce3ab8bd63384ac2c3dbfa299faa303b9aaa62452fc29e18e9c11b3ae01d76beb38ffda57ab956e3e323fe76c88a5430ddf890c82e8b584786d929cd7d8db4dfbeb9a14103046d5e965280de4d87377684e7f25d3f45398650dcb12f21a7a2533d629ea8c3ded8ac27d76ada9742d7f9b146c6a78c6a8e6640b2da9fac4190a0af1097ffec8beff44b981f99721095b1a0e730d79eeb51138710178c76dec4c8c18b443f7cf26355200edc8474d7493c8") ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) 16:34:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="5e000001000000002e2f6ef46c6530004e7ca7f709a21659c85bc3911880f2ddd26a9a979fe9a44812001b3a232f7904b6961c87f949b00d7c2aef152f42cc2140f75168c240735c66fdb94b06807bd7d426982d7166af14450dedbd7e7aa124b7d18326d66701b48d8857c1ea0138bee5e0cddc0bc745a71f73a531b1134b"]) write$bt_hci(r4, &(0x7f00000003c0)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="016420062963450f4afc5e3820090000000000f50700371c58946d362f6a65461c96a1484a472b652372ea44ba3505010000801b0000000cc1763b87ff5c041aa8bf3ab66ac88993ea5d32ee4901005b6d3fae2220073232a6a89ea3e9e6c486fd0228d08b01000000000000003db1fe0182c9f0fbd9ab7eb3874d837b258ba5c071d630c20d2af5304ab13f89ab55ff0cc4c48c5765ccd758fee57a44200882b57dc6fb83e65f0ebe501d70682370d799655c650f2eb627c2e6b4000adc996e6d9cfd3f5082f090377bfd0e"], 0xd) fsetxattr$security_selinux(r1, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x48000) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1502, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:34:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8}}}, 0x1d) 16:34:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x89060000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:38 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x3) 16:34:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:34:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:38 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) [ 2736.203326] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2737.412638] Bluetooth: hci2: command 0x0406 tx timeout [ 2737.479614] Bluetooth: hci1: command 0x0401 tx timeout 16:34:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x892f0000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:48 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x404) 16:34:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="5e000001000000002e2f6ef46c6530004e7ca7f709a21659c85bc3911880f2ddd26a9a979fe9a44812001b3a232f7904b6961c87f949b00d7c2aef152f42cc2140f75168c240735c66fdb94b06807bd7d426982d7166af14450dedbd7e7aa124b7d18326d66701b48d8857c1ea0138bee5e0cddc0bc745a71f73a531b1134b"]) write$bt_hci(r4, &(0x7f00000003c0)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="016420062963450f4afc5e3820090000000000f50700371c58946d362f6a65461c96a1484a472b652372ea44ba3505010000801b0000000cc1763b87ff5c041aa8bf3ab66ac88993ea5d32ee4901005b6d3fae2220073232a6a89ea3e9e6c486fd0228d08b01000000000000003db1fe0182c9f0fbd9ab7eb3874d837b258ba5c071d630c20d2af5304ab13f89ab55ff0cc4c48c5765ccd758fee57a44200882b57dc6fb83e65f0ebe501d70682370d799655c650f2eb627c2e6b4000adc996e6d9cfd3f5082f090377bfd0e"], 0xd) fsetxattr$security_selinux(r1, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x48000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:34:48 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) lseek(r0, 0x7, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) 16:34:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:34:48 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, 0x1d) 16:34:48 executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:48 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0xfdef) 16:34:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:34:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:34:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000002780)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002800)=""/147, 0x93}, {&(0x7f00000000c0)=""/215, 0xd7}], 0x2, &(0x7f0000000200)=""/221, 0xdd}, 0xb3f}, {{&(0x7f0000000300)=@pppol2tp, 0x80, &(0x7f0000001540)=[{&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x3, &(0x7f0000001580)=""/131, 0x83}, 0x3f}, {{&(0x7f0000001640)=@caif=@dgm, 0x80, &(0x7f0000001b00)=[{&(0x7f00000016c0)=""/125, 0x7d}, {&(0x7f0000001740)=""/13, 0xd}, {&(0x7f0000001780)=""/10, 0xa}, {&(0x7f00000017c0)=""/225, 0xe1}, {&(0x7f00000018c0)=""/249, 0xf9}, {&(0x7f00000019c0)=""/235, 0xeb}, {&(0x7f0000001ac0)}], 0x7}, 0x6}, {{&(0x7f0000001b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001c00)=""/224, 0xe0}, {&(0x7f0000001d00)=""/128, 0x80}, {&(0x7f0000001d80)=""/83, 0x53}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/195, 0xc3}, {&(0x7f0000001f40)=""/128, 0x80}, {&(0x7f0000001fc0)=""/39, 0x27}, {&(0x7f0000002000)=""/96, 0x60}, {&(0x7f0000002080)=""/212, 0xd4}], 0x9, &(0x7f0000002240)=""/101, 0x65}, 0xfeb}, {{&(0x7f00000022c0)=@ax25={{0x3, @netrom}, [@default, @null, @rose, @null, @null, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002340)=""/216, 0xd8}, {&(0x7f0000002440)=""/189, 0xbd}], 0x1000000000000086, &(0x7f0000002540)=""/217, 0xd9}, 0x3}], 0x5, 0x40000000, &(0x7f00000027c0)={r1, r2+60000000}) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) 16:34:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xdc050000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:49 executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) [ 2746.871372] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2748.036654] Bluetooth: hci1: command 0x0401 tx timeout [ 2748.100670] Bluetooth: hci2: command 0x0406 tx timeout [ 2750.084606] Bluetooth: hci1: command 0x0401 tx timeout 16:34:59 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) lseek(r0, 0x7, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)="6990dc31857d28ff735c1855580961166850fd2814ef9a376c91907273d03831dc12db72909a163274dfa52b0d68126db91a01a6378aaa22a277a404681893215287f3418ea2b13428f0a628bcadfa4a9f1ad875f4e1531ab30375644986227af6512b08465daad9ed86509f50369d840d3f") 16:34:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="5e000001000000002e2f6ef46c6530004e7ca7f709a21659c85bc3911880f2ddd26a9a979fe9a44812001b3a232f7904b6961c87f949b00d7c2aef152f42cc2140f75168c240735c66fdb94b06807bd7d426982d7166af14450dedbd7e7aa124b7d18326d66701b48d8857c1ea0138bee5e0cddc0bc745a71f73a531b1134b"]) write$bt_hci(r4, &(0x7f00000003c0)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="016420062963450f4afc5e3820090000000000f50700371c58946d362f6a65461c96a1484a472b652372ea44ba3505010000801b0000000cc1763b87ff5c041aa8bf3ab66ac88993ea5d32ee4901005b6d3fae2220073232a6a89ea3e9e6c486fd0228d08b01000000000000003db1fe0182c9f0fbd9ab7eb3874d837b258ba5c071d630c20d2af5304ab13f89ab55ff0cc4c48c5765ccd758fee57a44200882b57dc6fb83e65f0ebe501d70682370d799655c650f2eb627c2e6b4000adc996e6d9cfd3f5082f090377bfd0e"], 0xd) fsetxattr$security_selinux(r1, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:34:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xe0050000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0xfffffdef) 16:34:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:34:59 executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:59 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x7fff, 0xf801, 0x7, 0x8}}}, 0x1d) 16:34:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0xfffffffffffffdef) 16:34:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:34:59 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:34:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) (fail_nth: 1) 16:34:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b41066f094967336c9c2f9d79f2b07a6532e1149cd0000006b515474c66597b64c7fb6a3b18bbd2ce6e2cdbcbadd97b047270c8290b427effc3bfe2c0006d867cc4936620bb10b4a5a9b00e22a42a2777fc2ce7299f0d3d124450fa095f278270630c474aafc"], 0x7) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000080)="9cf114d4830090858637d619c9dc4916a288f06e1171baaf70047bf768a66848d662d121be26ba91ec3cfcdb5c48707088f457487d816a8326e86ddbc9") 16:34:59 executing program 2: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3ed, 0x400, 0x70bd27, 0x25dfdbfc, "b47338e35bca4219c9", ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x1044) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) [ 2756.887698] FAULT_INJECTION: forcing a failure. [ 2756.887698] name failslab, interval 1, probability 0, space 0, times 0 [ 2756.888674] CPU: 0 UID: 0 PID: 20725 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2756.888690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2756.888698] Call Trace: [ 2756.888702] [ 2756.888707] dump_stack_lvl+0xfa/0x120 [ 2756.888729] should_fail_ex+0x4d7/0x5e0 [ 2756.888747] should_failslab+0xc2/0x120 [ 2756.888766] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 2756.888780] ? __alloc_skb+0x2ab/0x370 [ 2756.888793] ? kasan_unpoison+0x27/0x60 [ 2756.888811] ? __alloc_skb+0x2ab/0x370 [ 2756.888821] __alloc_skb+0x2ab/0x370 [ 2756.888833] ? __pfx___alloc_skb+0x10/0x10 [ 2756.888853] alloc_skb_with_frags+0x8f/0x7c0 [ 2756.888869] ? __pfx_perf_trace_lock+0x10/0x10 [ 2756.888887] ? __alloc_frozen_pages_noprof+0x296/0x1f20 [ 2756.888908] sock_alloc_send_pskb+0x7cb/0x950 [ 2756.888920] ? lock_acquire+0x15e/0x2f0 [ 2756.888935] ? avc_has_perm_noaudit+0x59/0x3d0 [ 2756.888956] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 2756.888977] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2756.888989] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2756.889009] ? sock_has_perm+0x21c/0x2b0 [ 2756.889062] ? __pfx_sock_has_perm+0x10/0x10 [ 2756.889076] hci_sock_sendmsg+0x190/0x2270 [ 2756.889099] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2756.889123] sock_write_iter+0x57e/0x610 [ 2756.889141] ? __pfx_sock_write_iter+0x10/0x10 [ 2756.889166] ? security_file_permission+0x22/0x90 [ 2756.889187] vfs_write+0xbe9/0x1150 [ 2756.889204] ? __pfx_sock_write_iter+0x10/0x10 [ 2756.889220] ? __fget_files+0x34/0x3b0 [ 2756.889235] ? __pfx_vfs_write+0x10/0x10 [ 2756.889263] ksys_write+0x1ef/0x240 [ 2756.889278] ? __pfx_ksys_write+0x10/0x10 [ 2756.889299] do_syscall_64+0xbf/0x390 [ 2756.889320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2756.889333] RIP: 0033:0x7f31be145b19 [ 2756.889343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2756.889356] RSP: 002b:00007f31bb6bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2756.889368] RAX: ffffffffffffffda RBX: 00007f31be258f60 RCX: 00007f31be145b19 [ 2756.889376] RDX: 000000000000001d RSI: 0000000020000000 RDI: 0000000000000004 [ 2756.889383] RBP: 00007f31bb6bb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2756.889391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2756.889398] R13: 00007ffe96b1b6af R14: 00007f31bb6bb300 R15: 0000000000022000 [ 2756.889415] 16:34:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xeffdffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:34:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) (fail_nth: 2) [ 2757.591733] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2758.788703] Bluetooth: hci2: command 0x0406 tx timeout [ 2758.852663] Bluetooth: hci1: command 0x0401 tx timeout [ 2760.900763] Bluetooth: hci1: command 0x0401 tx timeout 16:35:09 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:35:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) (fail_nth: 3) 16:35:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x1c00, "20baee", 0x7f, 0x81}) 16:35:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xffff8e88, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:35:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="5e000001000000002e2f6ef46c6530004e7ca7f709a21659c85bc3911880f2ddd26a9a979fe9a44812001b3a232f7904b6961c87f949b00d7c2aef152f42cc2140f75168c240735c66fdb94b06807bd7d426982d7166af14450dedbd7e7aa124b7d18326d66701b48d8857c1ea0138bee5e0cddc0bc745a71f73a531b1134b"]) write$bt_hci(r4, &(0x7f00000003c0)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="016420062963450f4afc5e3820090000000000f50700371c58946d362f6a65461c96a1484a472b652372ea44ba3505010000801b0000000cc1763b87ff5c041aa8bf3ab66ac88993ea5d32ee4901005b6d3fae2220073232a6a89ea3e9e6c486fd0228d08b01000000000000003db1fe0182c9f0fbd9ab7eb3874d837b258ba5c071d630c20d2af5304ab13f89ab55ff0cc4c48c5765ccd758fee57a44200882b57dc6fb83e65f0ebe501d70682370d799655c650f2eb627c2e6b4000adc996e6d9cfd3f5082f090377bfd0e"], 0xd) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:35:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) 16:35:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) (fail_nth: 4) 16:35:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)="4d339e84af18d421a326ffc123a8ffcc960083e8b870b547501839623ee90dd3bd75de687648caa58cd2435875a0026b59a8c8ce76dae669627d0e452266dafe23272c988856558dc425909d750792d2507eb1") r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0x10040) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @sniff_mode={{0x803, 0xa}, {0xc8, 0x7d8, 0x3, 0x7, 0x8001}}}, 0xe) 16:35:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:35:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xffffa888, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:35:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:35:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x81, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f00000000c0)="0da9ab9540b69d1c6ac0988e3fb502afe32a28cc6ea9355bb246508689aaacb9ef0c0f27c257feb87e8fc94d2503775e6b80d3fe010000000000000012e7e35f0cbcba8f5b19228661728483d63a0f459c4cd63b21dcfac9d4357ebb78e4cf690427982ed56315e69a52e93f762d1bc0cbd633e97299d760340281c2c51d3ab563c64f58177ed2e1cf32b4eda8e176") 16:35:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xffffca88, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:35:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) [ 2767.728162] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2768.964668] Bluetooth: hci2: command 0x0406 tx timeout [ 2768.965768] Bluetooth: hci1: command 0x0401 tx timeout [ 2771.012621] Bluetooth: hci1: command 0x0401 tx timeout [ 2773.061689] Bluetooth: hci1: command 0x0401 tx timeout 16:35:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:20 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:20 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="006eb9ab0cd440934171272bb732a95f8ce4218bb820d71be56be9d70e720b8ef97d0f77fbbe1bacfdd1bd101575bd0b1bd51a5107bacce3c0206c5ff20dd697eaf8cb3eaa0d200ec3feeda4d860fca85e8819197612f09f7000830e635e5d79ef910a13087925e665ab5c1e0678ca6d04c1d74953982c2e9a8dfeaef066efeec5c56ef29b1763c31f759bada8970ff1697dd8357e4990b5dff5afe6b1a1ef72cf45fd625c3ebf38b45d380354eacf0e2f9faee1c1133ce1016a2c8d2938586a413db7b4ef2226de8ee6e9efb26c8e6be7d152f5652532b6805553eb95b2cb0ef17a7d92de5613e53c1f6398574a9610cda42bbb9b65a06a82435113b7421c8f50e351a6f297be269f74340e6d07000000807eae5da95357654ec6d0ef7c4833afc5"], 0x7) 16:35:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xffffdd86, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:35:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) (fail_nth: 5) 16:35:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:35:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000000)="54fb33a0709a7e4ab8a04f0cf0748345834187001efad5c5ad289e98b629cbf462f887de911598e57dc2d33aa60e0ed209b4c008") ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)}, {0xfffffffffffffffc}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f00000000c0)=""/125, 0x7d}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/101, 0x65}], 0x6, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x40000002) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0x1, 0x2}, 0x6) poll(&(0x7f0000000040)=[{r0, 0x8000}], 0x1, 0x81) close(r1) 16:35:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="5e000001000000002e2f6ef46c6530004e7ca7f709a21659c85bc3911880f2ddd26a9a979fe9a44812001b3a232f7904b6961c87f949b00d7c2aef152f42cc2140f75168c240735c66fdb94b06807bd7d426982d7166af14450dedbd7e7aa124b7d18326d66701b48d8857c1ea0138bee5e0cddc0bc745a71f73a531b1134b"]) write$bt_hci(r4, &(0x7f00000003c0)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) lseek(r1, 0x7, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) [ 2777.466434] FAULT_INJECTION: forcing a failure. [ 2777.466434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2777.468606] CPU: 0 UID: 0 PID: 20809 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2777.468642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2777.468655] Call Trace: [ 2777.468662] [ 2777.468671] dump_stack_lvl+0xfa/0x120 [ 2777.468709] should_fail_ex+0x4d7/0x5e0 [ 2777.468740] _copy_from_iter+0x1dc/0x1660 [ 2777.468767] ? lock_acquire+0x15e/0x2f0 [ 2777.468798] ? __virt_addr_valid+0x1c6/0x5d0 [ 2777.468822] ? find_held_lock+0x2b/0x80 [ 2777.468847] ? __pfx__copy_from_iter+0x10/0x10 [ 2777.468870] ? lock_release+0xc8/0x290 [ 2777.468905] ? __virt_addr_valid+0x100/0x5d0 [ 2777.468991] ? __check_object_size+0x579/0x880 [ 2777.469024] hci_sock_sendmsg+0x402/0x2270 [ 2777.469066] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2777.469110] sock_write_iter+0x57e/0x610 [ 2777.469144] ? __pfx_sock_write_iter+0x10/0x10 [ 2777.469191] ? security_file_permission+0x22/0x90 [ 2777.469230] vfs_write+0xbe9/0x1150 [ 2777.469261] ? __pfx_sock_write_iter+0x10/0x10 [ 2777.469291] ? __fget_files+0x34/0x3b0 [ 2777.469318] ? __pfx_vfs_write+0x10/0x10 [ 2777.469370] ksys_write+0x1ef/0x240 [ 2777.469398] ? __pfx_ksys_write+0x10/0x10 [ 2777.469437] do_syscall_64+0xbf/0x390 [ 2777.469473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2777.469503] RIP: 0033:0x7f31be145b19 [ 2777.469521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2777.469542] RSP: 002b:00007f31bb6bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2777.469564] RAX: ffffffffffffffda RBX: 00007f31be258f60 RCX: 00007f31be145b19 [ 2777.469579] RDX: 000000000000001d RSI: 0000000020000000 RDI: 0000000000000004 [ 2777.469592] RBP: 00007f31bb6bb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2777.469605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2777.469620] R13: 00007ffe96b1b6af R14: 00007f31bb6bb300 R15: 0000000000022000 [ 2777.469655] [ 2778.287597] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2779.588576] Bluetooth: hci2: command 0x0406 tx timeout 16:35:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xfffff000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:35:30 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:35:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) (fail_nth: 6) 16:35:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) (fail_nth: 1) 16:35:30 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="5e000001000000002e2f6ef46c6530004e7ca7f709a21659c85bc3911880f2ddd26a9a979fe9a44812001b3a232f7904b6961c87f949b00d7c2aef152f42cc2140f75168c240735c66fdb94b06807bd7d426982d7166af14450dedbd7e7aa124b7d18326d66701b48d8857c1ea0138bee5e0cddc0bc745a71f73a531b1134b"]) write$bt_hci(r4, &(0x7f00000003c0)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:35:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x1, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x5c058f989d07ef77, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = eventfd(0x80) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x1, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) fsetxattr$security_selinux(r5, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRESOCT]) io_submit(0x0, 0x5, &(0x7f00000014c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000180)="5b0274d32cedad36f9ce0eb4dbbe291f44a1e0f01a143e8ac4d8ced8ad1f77de4cc45ac75b35f8c9db0ba68f5c3f968a41763e0f38b1fccbb5b00d39520e020f5927341edd6baadc127bd4d17bdb2b69643a7ade0aa344ac590e38269e28f2dad7d7b1c118309bb67833b3220967b792967824752b56acbc21a54954eca4995ca064dcc107bbd8def802aa19eee424b18341591c", 0x94, 0x4, 0x0, 0x0, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x800, r1, &(0x7f0000000280)="f4bc9f794c5778f39aaef983ad71ee87a1087c7bf3ba667229c8626616579e29", 0x20, 0x7195, 0x0, 0x3, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x1005, 0xffffffffffffffff, &(0x7f0000000300)="fc2933881916e1657c1afe2a0b00f34e157dbdf8a4127094d5a46a27116b3b0914396eb65088ab06a810ddf8421398002d042c049220a9ed925771f1f9d104f23799b9463baa96d897cfd570e21eb7d84f", 0x51, 0x5f4, 0x0, 0x0, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x7f, r5, &(0x7f00000003c0)='@', 0x1, 0x20, 0x0, 0x1}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x88, 0xffffffffffffffff, &(0x7f0000000480)="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", 0x1000, 0xdb7}]) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r3, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) [ 2787.947142] FAULT_INJECTION: forcing a failure. [ 2787.947142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2787.948980] CPU: 0 UID: 0 PID: 20827 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2787.949009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2787.949023] Call Trace: [ 2787.949030] [ 2787.949039] dump_stack_lvl+0xfa/0x120 [ 2787.949075] should_fail_ex+0x4d7/0x5e0 [ 2787.949106] _copy_to_user+0x32/0xd0 [ 2787.949135] simple_read_from_buffer+0xe0/0x180 [ 2787.949163] proc_fail_nth_read+0x18a/0x240 [ 2787.949197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2787.949229] ? security_file_permission+0x22/0x90 [ 2787.949264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2787.949296] vfs_read+0x1eb/0xc70 [ 2787.949331] ? __pfx_vfs_read+0x10/0x10 [ 2787.949360] ? lock_release+0xc8/0x290 [ 2787.949396] ? __fget_files+0x20d/0x3b0 [ 2787.949436] ksys_read+0x121/0x240 [ 2787.949463] ? __pfx_ksys_read+0x10/0x10 [ 2787.949509] do_syscall_64+0xbf/0x390 [ 2787.949545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2787.949568] RIP: 0033:0x7f31be0f869c [ 2787.949627] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2787.949649] RSP: 002b:00007f31bb6bb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2787.949670] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 00007f31be0f869c [ 2787.949684] RDX: 000000000000000f RSI: 00007f31bb6bb1e0 RDI: 0000000000000005 [ 2787.949698] RBP: 00007f31bb6bb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2787.949711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2787.949724] R13: 00007ffe96b1b6af R14: 00007f31bb6bb300 R15: 0000000000022000 [ 2787.949758] [ 2787.971791] FAULT_INJECTION: forcing a failure. [ 2787.971791] name failslab, interval 1, probability 0, space 0, times 0 [ 2787.973761] CPU: 1 UID: 0 PID: 20834 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2787.973791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2787.973804] Call Trace: [ 2787.973810] [ 2787.973819] dump_stack_lvl+0xfa/0x120 [ 2787.973850] should_fail_ex+0x4d7/0x5e0 [ 2787.973924] should_failslab+0xc2/0x120 [ 2787.973956] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 2787.973982] ? __alloc_skb+0x2ab/0x370 [ 2787.974004] ? kasan_unpoison+0x27/0x60 [ 2787.974038] ? __alloc_skb+0x2ab/0x370 [ 2787.974056] __alloc_skb+0x2ab/0x370 [ 2787.974078] ? __pfx___alloc_skb+0x10/0x10 [ 2787.974119] alloc_skb_with_frags+0x8f/0x7c0 [ 2787.974150] ? __pfx_perf_trace_lock+0x10/0x10 [ 2787.974180] ? __alloc_frozen_pages_noprof+0x296/0x1f20 [ 2787.974219] sock_alloc_send_pskb+0x7cb/0x950 [ 2787.974240] ? lock_acquire+0x15e/0x2f0 [ 2787.974269] ? avc_has_perm_noaudit+0x59/0x3d0 [ 2787.974304] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 2787.974342] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2787.974364] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2787.974403] ? sock_has_perm+0x21c/0x2b0 [ 2787.974423] ? __pfx_sock_has_perm+0x10/0x10 [ 2787.974448] hci_sock_sendmsg+0x190/0x2270 [ 2787.974491] ? perf_trace_lock+0xb5/0x5d0 [ 2787.974524] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2787.974568] sock_write_iter+0x57e/0x610 [ 2787.974601] ? __pfx_sock_write_iter+0x10/0x10 [ 2787.974647] ? security_file_permission+0x22/0x90 [ 2787.974685] vfs_write+0xbe9/0x1150 [ 2787.974714] ? __pfx_sock_write_iter+0x10/0x10 [ 2787.974744] ? __fget_files+0x34/0x3b0 [ 2787.974770] ? __pfx_vfs_write+0x10/0x10 [ 2787.974822] ksys_write+0x1ef/0x240 [ 2787.974849] ? __pfx_ksys_write+0x10/0x10 [ 2787.974888] do_syscall_64+0xbf/0x390 [ 2787.974953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2787.974975] RIP: 0033:0x7f576106bb19 [ 2787.974992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2787.975013] RSP: 002b:00007f575e5e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2787.975035] RAX: ffffffffffffffda RBX: 00007f576117ef60 RCX: 00007f576106bb19 [ 2787.975049] RDX: 0000000000000007 RSI: 0000000020000040 RDI: 0000000000000004 [ 2787.975063] RBP: 00007f575e5e11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2787.975076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2787.975089] R13: 00007ffd77287eef R14: 00007f575e5e1300 R15: 0000000000022000 [ 2787.975122] 16:35:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xfffff788, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:35:30 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:30 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) getpeername(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000000c0)=0x80) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x7) 16:35:30 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:35:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) (fail_nth: 2) 16:35:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:35:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xfffffb88, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:35:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:31 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:35:31 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:31 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x1, 0x1) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) [ 2788.771383] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2790.084720] Bluetooth: hci1: command 0x0401 tx timeout [ 2790.086064] Bluetooth: hci2: command 0x0406 tx timeout [ 2792.133375] Bluetooth: hci1: command 0x0401 tx timeout [ 2794.180771] Bluetooth: hci1: command 0x0401 tx timeout 16:35:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) (fail_nth: 3) 16:35:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x2, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:35:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xfffffdef, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:35:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="5e000001000000002e2f6ef46c6530004e7ca7f709a21659c85bc3911880f2ddd26a9a979fe9a44812001b3a232f7904b6961c87f949b00d7c2aef152f42cc2140f75168c240735c66fdb94b06807bd7d426982d7166af14450dedbd7e7aa124b7d18326d66701b48d8857c1ea0138bee5e0cddc0bc745a71f73a531b1134b"]) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:35:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:35:41 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:35:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:35:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:35:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x7ffffffff000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:35:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000080)="fb7e49352b6792e62d68fda34e672fabe9c11efe99fe1db81c860a679e17ca448d0e2169d37fea229e68e6b50fb8af2227a889589b5923be0fb218c1870fc0611452f9901d985d82084fe683104873d1b6e5b1acf4f2b231020730748e050442ba9ec3c2d7c917889f7f355ffdfb641d44898cd4a5230932d2bfcb2e1504f75fd164e923720c0927cc41f422c13a5d0a4ff77318af67605dde539885c468cf717008ca1d4e1cc9ba33b1327c25d6e84e39d94f364aa725f408bbb9d5f8becae0211f43922868012bf80905860d1b27b0200ff936fd517023a9abdf3b9f24f862d7e515") 16:35:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) (fail_nth: 4) 16:35:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1d, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) [ 2799.945790] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2801.156599] Bluetooth: hci2: command 0x0406 tx timeout [ 2801.220646] Bluetooth: hci1: command 0x0401 tx timeout [ 2803.268615] Bluetooth: hci1: command 0x0401 tx timeout [ 2805.316604] Bluetooth: hci1: command 0x0401 tx timeout 16:35:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @create_conn={{0x405, 0xd}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x401, 0x3, 0x9, 0x7, 0x8}}}, 0x11) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:35:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:35:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) (fail_nth: 5) 16:35:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:35:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) [ 2808.573253] FAULT_INJECTION: forcing a failure. [ 2808.573253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2808.574363] CPU: 0 UID: 0 PID: 20927 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2808.574379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2808.574387] Call Trace: [ 2808.574391] [ 2808.574396] dump_stack_lvl+0xfa/0x120 [ 2808.574419] should_fail_ex+0x4d7/0x5e0 [ 2808.574437] _copy_from_iter+0x1dc/0x1660 [ 2808.574453] ? lock_acquire+0x15e/0x2f0 [ 2808.574470] ? __virt_addr_valid+0x1c6/0x5d0 [ 2808.574488] ? find_held_lock+0x2b/0x80 [ 2808.574501] ? __pfx__copy_from_iter+0x10/0x10 [ 2808.574514] ? lock_release+0xc8/0x290 [ 2808.574532] ? __virt_addr_valid+0x100/0x5d0 [ 2808.574545] ? __check_object_size+0x579/0x880 [ 2808.574563] hci_sock_sendmsg+0x402/0x2270 [ 2808.574583] ? perf_trace_lock+0xb5/0x5d0 [ 2808.574602] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2808.574626] sock_write_iter+0x57e/0x610 [ 2808.574645] ? __pfx_sock_write_iter+0x10/0x10 [ 2808.574670] ? security_file_permission+0x22/0x90 [ 2808.574692] vfs_write+0xbe9/0x1150 [ 2808.574709] ? __pfx_sock_write_iter+0x10/0x10 [ 2808.574725] ? __fget_files+0x34/0x3b0 [ 2808.574739] ? __pfx_vfs_write+0x10/0x10 [ 2808.574767] ksys_write+0x1ef/0x240 [ 2808.574782] ? __pfx_ksys_write+0x10/0x10 [ 2808.574852] do_syscall_64+0xbf/0x390 [ 2808.574872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2808.574885] RIP: 0033:0x7f576106bb19 [ 2808.574895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2808.574907] RSP: 002b:00007f575e5e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2808.574920] RAX: ffffffffffffffda RBX: 00007f576117ef60 RCX: 00007f576106bb19 [ 2808.574928] RDX: 0000000000000007 RSI: 0000000020000040 RDI: 0000000000000004 [ 2808.574935] RBP: 00007f575e5e11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2808.574942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2808.574949] R13: 00007ffd77287eef R14: 00007f575e5e1300 R15: 0000000000022000 [ 2808.574966] 16:35:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x40030000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:35:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x2, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:35:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000000)="25117095fb0b3c3be03d1ccd93eb8bc1d4dd60a32559a36f13a2e2b241ec1f35f61e7eab") bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) (fail_nth: 6) 16:35:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:35:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:35:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) [ 2808.776927] FAULT_INJECTION: forcing a failure. [ 2808.776927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2808.777929] CPU: 0 UID: 0 PID: 20948 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2808.777946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2808.777954] Call Trace: [ 2808.777959] [ 2808.777964] dump_stack_lvl+0xfa/0x120 [ 2808.777987] should_fail_ex+0x4d7/0x5e0 [ 2808.778005] _copy_to_user+0x32/0xd0 [ 2808.778022] simple_read_from_buffer+0xe0/0x180 [ 2808.778039] proc_fail_nth_read+0x18a/0x240 [ 2808.778057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2808.778075] ? security_file_permission+0x22/0x90 [ 2808.778095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2808.778112] vfs_read+0x1eb/0xc70 [ 2808.778131] ? __pfx_vfs_read+0x10/0x10 [ 2808.778147] ? lock_release+0xc8/0x290 [ 2808.778168] ? __fget_files+0x20d/0x3b0 [ 2808.778190] ksys_read+0x121/0x240 [ 2808.778205] ? __pfx_ksys_read+0x10/0x10 [ 2808.778226] do_syscall_64+0xbf/0x390 [ 2808.778246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2808.778259] RIP: 0033:0x7f576101e69c [ 2808.778269] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2808.778281] RSP: 002b:00007f575e5e1170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2808.778293] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f576101e69c [ 2808.778302] RDX: 000000000000000f RSI: 00007f575e5e11e0 RDI: 0000000000000003 [ 2808.778309] RBP: 00007f575e5e11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2808.778316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2808.778323] R13: 00007ffd77287eef R14: 00007f575e5e1300 R15: 0000000000022000 [ 2808.778341] [ 2809.374113] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2810.564636] Bluetooth: hci2: command 0x0406 tx timeout [ 2810.628597] Bluetooth: hci1: command 0x0401 tx timeout [ 2812.676738] Bluetooth: hci1: command 0x0401 tx timeout [ 2814.724566] Bluetooth: hci1: command 0x0401 tx timeout [ 2816.772599] Bluetooth: hci1: command 0x0401 tx timeout 16:36:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x4, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:36:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:36:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:36:00 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) lseek(r0, 0x7, 0x1) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @write_local_name={{0xc13, 0xf8}, {"e7da9a9b9eabfe25c071a198bb73c0e0ec85da04d8d19eee0f495eeea264549c0861b34a1e9ccaf93acdf438bb2f6e4ce1810a757e27313fa21b340b29bfa1ea876e25ccd102d7287cd1eec624b585378e0ce043c06c7820f01e2b3ea1cd589c504a9f7f7ca9b8fcad45055f2d94f4c4bf5fc5955f4de98a49ae797438c6bf4172fb44d71afb5ac247ad8ad937954bf188e181a0927ba5faab695f94e6d26306c33f54db15583861679c1aa0e19ef86e3a6902a3d73c9fcfc9d358f154583792e3a60bad58e2aa49b70a9f879812f77bdf0fc295349921a928613d4a1f83ef19c6ed9cff65c4b2d47a6c61b6c983bc0eba71f31604cc36d5"}}}, 0xfc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) 16:36:00 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:36:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:36:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x80080000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:36:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:36:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x3, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:36:00 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:36:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:36:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) [ 2818.931687] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2820.164653] Bluetooth: hci2: command 0x0406 tx timeout 16:36:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x5, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:36:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xf0ffffff7f0000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:36:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01ff0303986c13"], 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4, 0x4}, 0x6) 16:36:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:36:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:36:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:36:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) lseek(r3, 0x7, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:36:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:36:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xf0ffffffffffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:36:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:36:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x5}}}, 0x7) 16:36:10 executing program 7: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x43f) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:36:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x6, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:36:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:36:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:36:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) [ 2828.030411] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2829.188677] Bluetooth: hci1: command 0x0401 tx timeout [ 2829.252781] Bluetooth: hci2: command 0x0406 tx timeout [ 2831.236619] Bluetooth: hci1: command 0x0401 tx timeout [ 2833.284731] Bluetooth: hci1: command 0x0401 tx timeout [ 2835.332554] Bluetooth: hci1: command 0x0401 tx timeout 16:36:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x200, "8850b0", 0x9, 0x80}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:36:19 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @remote_oob_data_reply={{0x430, 0x26}, {@any, "f65f94b730c774b4f0b2d9f049a283f9", "9ee3f4c5774b78b13f3fc72129ec32f0"}}}, 0x2a) 16:36:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:36:19 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x2}}}, 0x7) 16:36:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x8, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:36:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:36:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x1c, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:20 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:36:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x4}}}, 0x7) 16:36:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x300000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:36:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:36:20 executing program 7: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000240)={0x4a, 0x6f, 0x1, {0x5, [{0x0, 0x3, 0x8}, {0x0, 0x4, 0x4}, {0x0, 0x3, 0x4}, {0x80, 0x3, 0x4}, {0x20, 0x2}]}}, 0x4a) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="011c04030000004321bf6673732d9151cb4eacb1a7f0b2677cffaf441e9f21ccbceb69f4c9aa4e497405b45531a37ee1a2b1e0353fdb5d1bd07fdadc30969401fec3b32c44cecd14dbc3d708c1276d5de14faf8af225445d9d4461db9a210baf096ceee8e0c0c40a385156a18b23eceeaf959adbcf184f3732791a6f50cfde00610094bdae788204550a027a8b1b98947777fed35b3d30be974b369fefc6ff94be230813382a6f0900240b2d5927dd95aa1be0c5bdebd3ea4f01b84309e703d5efc2e1d81023d2018676004fd1d8c9f63b841c18ed6e59fcacf019d2"], 0x7) 16:36:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x500, 0x0, 0x0, 0x0, @none}}}, 0x1d) [ 2837.380536] Bluetooth: hci1: command 0x0401 tx timeout [ 2838.036790] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2839.236611] Bluetooth: hci2: command 0x0406 tx timeout [ 2839.428670] Bluetooth: hci1: command 0x0401 tx timeout [ 2841.476638] Bluetooth: hci1: command 0x0401 tx timeout [ 2843.524656] Bluetooth: hci1: command 0x0401 tx timeout [ 2845.572696] Bluetooth: hci1: command 0x0401 tx timeout 16:36:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:36:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:36:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:36:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x600, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x5}}}, 0x7) 16:36:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:36:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:36:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000080)="129c1570ede5ef636f7d384fbbc017f2b4572277351fdbd4518e149a13dd418ba806ba") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:36:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:36:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:36:30 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x2, 0x2) 16:36:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x6}}}, 0x7) 16:36:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:36:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x1c00, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:36:30 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_ext_scan_params={{0x2041, 0xb8}, {0x1, 0x20, 0xff, "64a6c22d0c3ee5a14b44bebd0bc471697dbf3ca4135e5ccb1119ef8877665e8205e89c9dbe5ae7075427012403c813e577c6a5ec5f1e45762a3c4158f231ef729b465d129f111965290ae6018040d7518ef534677e232bfe6cbcb825638767e37206942266dfb203549c83a6c96278b80aa2e42884cd2dd6bf9ae6029c37fe5ffcc09599f695432edf10a06f9789bbac2c6e1758c4e0880870e68023d55fae8706f31d79ee562e830089e0a32c4d48c07c6a76efa9"}}}, 0xbc) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100084a08ad00000000000000160000f8ec29d0bc7e72d9e395fae2aebd5ec9cb4863f819640eb6d19265f40139942e5d3f05cc3d551287333b6b65e20f488311d54c78d05bb19df503fae1680b8e78678e5858a826a6328d3fb4072176780b1d0213fe1604ab9468e573d34251354b328b49ce9975097a18047ddf60d1b2cd078b3cc5de41ad465913deca2831520d18d23d32e06409bf3348dd6fb809d601fbc2bb31837514516257951c89139888f15a27845bc6c6b998c4109ca21087"], 0x7) 16:36:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) [ 2847.620621] Bluetooth: hci1: command 0x0401 tx timeout [ 2847.994703] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2849.220623] Bluetooth: hci2: command 0x0406 tx timeout [ 2849.668621] Bluetooth: hci1: command 0x0401 tx timeout [ 2851.716622] Bluetooth: hci1: command 0x0401 tx timeout [ 2853.764665] Bluetooth: hci1: command 0x0401 tx timeout [ 2855.812648] Bluetooth: hci1: command 0x0401 tx timeout 16:36:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x806000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:36:40 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:40 executing program 7: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x104000, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000000c0)={r1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000280)=[@increfs, @exit_looper, @dead_binder_done], 0xb5, 0x0, &(0x7f00000002c0)="5af745c71b858ef0a8885fb1f33e7431464289fafc3892c352d90577027add749f38132b2cfc0a9f39cc3a69d06a136709a49207c076c88e40bbe231975575a2cea248dc96d9fda32c00ee8e7366261753fc1be04b06f3e1c657e9ea665575071c11750a821d54e8847774d1107229ef3fd9034c75240ef3dce445f8eab74369b6b63cf445853b96ccd151b6efc00440386cef31e4929f468ddc82d0218df0a4766839ef1012aff17f74fd2796ee30c9fdcd5d34b3"}) 16:36:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:36:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) (fail_nth: 1) 16:36:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:36:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x8}}}, 0x7) [ 2857.434024] FAULT_INJECTION: forcing a failure. [ 2857.434024] name failslab, interval 1, probability 0, space 0, times 0 [ 2857.437884] CPU: 1 UID: 0 PID: 21144 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2857.437922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2857.437938] Call Trace: [ 2857.437947] [ 2857.437957] dump_stack_lvl+0xfa/0x120 [ 2857.437999] should_fail_ex+0x4d7/0x5e0 [ 2857.438036] should_failslab+0xc2/0x120 [ 2857.438073] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 2857.438105] ? __alloc_skb+0x2ab/0x370 [ 2857.438130] ? kasan_unpoison+0x27/0x60 [ 2857.438171] ? __alloc_skb+0x2ab/0x370 [ 2857.438194] __alloc_skb+0x2ab/0x370 [ 2857.438220] ? __pfx___alloc_skb+0x10/0x10 [ 2857.438264] alloc_skb_with_frags+0x8f/0x7c0 [ 2857.438301] ? __pfx_perf_trace_lock+0x10/0x10 [ 2857.438338] ? __alloc_frozen_pages_noprof+0x296/0x1f20 [ 2857.438385] sock_alloc_send_pskb+0x7cb/0x950 [ 2857.438410] ? lock_acquire+0x15e/0x2f0 [ 2857.438445] ? avc_has_perm_noaudit+0x59/0x3d0 [ 2857.438498] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 2857.438544] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2857.438571] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2857.438617] ? sock_has_perm+0x21c/0x2b0 [ 2857.438741] ? __pfx_sock_has_perm+0x10/0x10 [ 2857.438772] hci_sock_sendmsg+0x190/0x2270 [ 2857.438817] ? perf_trace_lock+0xb5/0x5d0 [ 2857.438858] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2857.438911] sock_write_iter+0x57e/0x610 [ 2857.438950] ? __pfx_sock_write_iter+0x10/0x10 [ 2857.439006] ? security_file_permission+0x22/0x90 [ 2857.439052] vfs_write+0xbe9/0x1150 [ 2857.439088] ? __pfx_sock_write_iter+0x10/0x10 [ 2857.439125] ? __fget_files+0x34/0x3b0 [ 2857.439157] ? __pfx_vfs_write+0x10/0x10 [ 2857.439220] ksys_write+0x1ef/0x240 [ 2857.439254] ? __pfx_ksys_write+0x10/0x10 [ 2857.439301] do_syscall_64+0xbf/0x390 [ 2857.439344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2857.439372] RIP: 0033:0x7fe648e14b19 [ 2857.439394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2857.439421] RSP: 002b:00007fe64638a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2857.439454] RAX: ffffffffffffffda RBX: 00007fe648f27f60 RCX: 00007fe648e14b19 [ 2857.439472] RDX: 0000000000000178 RSI: 0000000020000040 RDI: 0000000000000004 [ 2857.439488] RBP: 00007fe64638a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2857.439504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2857.439520] R13: 00007ffc21ae27bf R14: 00007fe64638a300 R15: 0000000000022000 [ 2857.439560] 16:36:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:36:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x500}}}, 0x7) 16:36:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xb00000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2857.860967] Bluetooth: hci1: command 0x0401 tx timeout [ 2858.329956] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2859.524649] Bluetooth: hci2: command 0x0406 tx timeout [ 2859.908575] Bluetooth: hci1: command 0x0401 tx timeout [ 2861.956564] Bluetooth: hci1: command 0x0401 tx timeout [ 2864.004647] Bluetooth: hci1: command 0x0401 tx timeout [ 2866.052629] Bluetooth: hci1: command 0x0401 tx timeout 16:36:51 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:36:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x2, 0x0, 0x0, @none}}}, 0x1d) 16:36:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x600}}}, 0x7) 16:36:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) (fail_nth: 2) 16:36:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xe00000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:36:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x2, 0x9, "6b75f3", 0x9, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:36:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x8, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x2, 0x6, "1b4699", 0xc3, 0x9}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:36:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:36:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x4, 0x0, 0x0, @none}}}, 0x1d) 16:36:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:36:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) (fail_nth: 3) 16:36:51 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:36:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4305000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:36:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011c4827f99b328341040300"], 0x7) 16:36:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x5, 0x0, 0x0, @none}}}, 0x1d) 16:36:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x2}}}, 0x7) [ 2869.558727] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2870.788672] Bluetooth: hci2: command 0x0406 tx timeout [ 2870.789986] Bluetooth: hci1: command 0x0401 tx timeout [ 2872.836660] Bluetooth: hci1: command 0x0401 tx timeout [ 2874.884629] Bluetooth: hci1: command 0x0401 tx timeout [ 2876.932563] Bluetooth: hci1: command 0x0401 tx timeout 16:37:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) (fail_nth: 4) 16:37:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x6000000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:37:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r1, r0, 0x80000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:37:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x6, 0x0, 0x0, @none}}}, 0x1d) 16:37:01 executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x4}}}, 0x7) 16:37:01 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0x7f, 0x1f, 0x0, 0x9}}}, 0xa) 16:37:01 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:01 executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:01 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:37:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) (fail_nth: 5) 16:37:01 executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x5}}}, 0x7) [ 2878.417024] FAULT_INJECTION: forcing a failure. [ 2878.417024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2878.418226] CPU: 1 UID: 0 PID: 21250 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2878.418244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2878.418252] Call Trace: [ 2878.418257] [ 2878.418262] dump_stack_lvl+0xfa/0x120 [ 2878.418286] should_fail_ex+0x4d7/0x5e0 [ 2878.418305] _copy_from_iter+0x1dc/0x1660 [ 2878.418322] ? lock_acquire+0x15e/0x2f0 [ 2878.418398] ? __virt_addr_valid+0x1c6/0x5d0 [ 2878.418413] ? find_held_lock+0x2b/0x80 [ 2878.418427] ? __pfx__copy_from_iter+0x10/0x10 [ 2878.418441] ? lock_release+0xc8/0x290 [ 2878.418462] ? __virt_addr_valid+0x100/0x5d0 [ 2878.418481] ? __check_object_size+0x579/0x880 [ 2878.418500] hci_sock_sendmsg+0x402/0x2270 [ 2878.418522] ? perf_trace_lock+0xb5/0x5d0 [ 2878.418542] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2878.418568] sock_write_iter+0x57e/0x610 [ 2878.418589] ? __pfx_sock_write_iter+0x10/0x10 [ 2878.418616] ? security_file_permission+0x22/0x90 [ 2878.418640] vfs_write+0xbe9/0x1150 [ 2878.418659] ? __pfx_sock_write_iter+0x10/0x10 [ 2878.418677] ? __fget_files+0x34/0x3b0 [ 2878.418693] ? __pfx_vfs_write+0x10/0x10 [ 2878.418724] ksys_write+0x1ef/0x240 [ 2878.418741] ? __pfx_ksys_write+0x10/0x10 [ 2878.418764] do_syscall_64+0xbf/0x390 [ 2878.418786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2878.418800] RIP: 0033:0x7fe648e14b19 [ 2878.418811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2878.418823] RSP: 002b:00007fe64638a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2878.418836] RAX: ffffffffffffffda RBX: 00007fe648f27f60 RCX: 00007fe648e14b19 [ 2878.418845] RDX: 0000000000000178 RSI: 0000000020000040 RDI: 0000000000000004 [ 2878.418853] RBP: 00007fe64638a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2878.418861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2878.418868] R13: 00007ffc21ae27bf R14: 00007fe64638a300 R15: 0000000000022000 [ 2878.418892] 16:37:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x6558000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:37:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x8, 0x0, 0x0, @none}}}, 0x1d) 16:37:01 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000240)="6647b8d6fb4efe74e1c9f0ea4e0e316fbf4ebd21907599f4574eccc5b99747dc2d735f20fdef75381bbf174a9e93fe69d42160df0b780852c7b1438fd8a4e85c2f946655f735deb8cc4d8677e9e62237a7ab4f198e130c347ce98e6f082bf8bc36c9da202aa98a6ca2f0c75c6ffc3972b86349d6a866c67a1e5ef42a9b1c1e5c27b8") setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x5, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2, 0xcee675d877fc2425}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[], 0x7) write$bt_hci(r1, &(0x7f0000000100)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x9}}}, 0x5) fsync(r1) 16:37:01 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:37:01 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) [ 2880.324621] Bluetooth: hci1: command 0x0401 tx timeout 16:37:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) (fail_nth: 6) 16:37:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8035000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:37:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x6}}}, 0x7) 16:37:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:10 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000140)="aebbb9433aeb30a53062c10b5cce323117a49e5789220628ba7922982f17b9178c27879b8aeb06740c0993ad8dd6029ab9ab46085b00656eed6d182f262875af81b843da99dbb56b4ce9cb8af709f3e3ef16a993c7a2e84d647f803d0ae2c034844e807fdee15c4f3deb5a3668fde9c5a0293dee2834664de3b3b1e9f5adaefcb4736d0e09b0b6f706574bfcb8b6562b80b79de8e99a7d5a9dedd4f1") write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b3a566dfc0300b6d411bc2e230b1ff944e89e13288c6e58bbdc5abab7b3b972262c78bc273dfcb09080962a3e5447ea484f81dbfb58c73678b2054564b999919eec7895cda3301a3622078d09cd9fe1877d1216d20d0c357a3b6b1f0880458c35186c961fa1549341437df2ab350625c72b337d4fb10e65c"], 0xc) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)="29c250df16f01428701d4ebb") 16:37:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x1c, 0x0, 0x0, @none}}}, 0x1d) 16:37:10 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) [ 2888.032789] FAULT_INJECTION: forcing a failure. [ 2888.032789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2888.034646] CPU: 1 UID: 0 PID: 21289 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2888.034677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2888.034691] Call Trace: [ 2888.034698] [ 2888.034707] dump_stack_lvl+0xfa/0x120 [ 2888.034746] should_fail_ex+0x4d7/0x5e0 [ 2888.034777] _copy_to_user+0x32/0xd0 [ 2888.034807] simple_read_from_buffer+0xe0/0x180 [ 2888.034837] proc_fail_nth_read+0x18a/0x240 [ 2888.034872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2888.034905] ? security_file_permission+0x22/0x90 [ 2888.034941] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2888.034973] vfs_read+0x1eb/0xc70 [ 2888.035008] ? __pfx_vfs_read+0x10/0x10 [ 2888.035038] ? lock_release+0xc8/0x290 [ 2888.035075] ? __fget_files+0x20d/0x3b0 [ 2888.035181] ksys_read+0x121/0x240 [ 2888.035208] ? __pfx_ksys_read+0x10/0x10 [ 2888.035247] do_syscall_64+0xbf/0x390 [ 2888.035284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2888.035307] RIP: 0033:0x7fe648dc769c [ 2888.035325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2888.035347] RSP: 002b:00007fe64638a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2888.035369] RAX: ffffffffffffffda RBX: 0000000000000178 RCX: 00007fe648dc769c [ 2888.035384] RDX: 000000000000000f RSI: 00007fe64638a1e0 RDI: 0000000000000003 [ 2888.035397] RBP: 00007fe64638a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2888.035411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2888.035424] R13: 00007ffc21ae27bf R14: 00007fe64638a300 R15: 0000000000022000 [ 2888.035459] 16:37:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x3) 16:37:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8100000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:37:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:37:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x500, 0x0, 0x0, @none}}}, 0x1d) 16:37:10 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000080)="4d17ebb2ea5e0a1fd2891375ffadaa95cd5d45de172dc0cfe07cf065538ad44d52d1aacef6eb45ae7a5a1b0f8c02ad7c6d8a184257ca307ae0e3cd63311411b17919a4fcf3b7d9abf17f06d9dc66be2d6b9657821149e82bc328d3f0e16747b1441457a865d46503aac649bafd0281ee6f217b83cde197b44b44849d6749b400452a020391cbc272683a623c7fa32432e41e13c4fb15b7803f9a420a9d780a2fc30eed0fa19599c27844b3f1bf770eebe13149ef63c6be3010723e0da7c2b781d969b838717b1b6af2be7f5b2d7c0a0214770d8d") write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2107f702000000"], 0x7) [ 2890.054416] Bluetooth: hci1: command 0x0401 tx timeout [ 2892.102418] Bluetooth: hci1: command 0x0401 tx timeout 16:37:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x2, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:37:19 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x3, 0x0, "a97403", 0x7, 0x4}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x76f, [0xc831, 0x15], 0xfff}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01492ba3120000"], 0x7) write$bt_hci(r0, &(0x7f0000000080)={0x1, @link_key_reply={{0x40b, 0x16}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "75d0336552d71f409b6b7ae01dfaad54"}}}, 0x1a) 16:37:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x5) 16:37:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x86ddffff00000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:37:19 executing program 1: openat$sndseq(0xffffffffffffff9c, 0x0, 0x84501) 16:37:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x600, 0x0, 0x0, @none}}}, 0x1d) 16:37:19 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:37:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:19 executing program 1: openat$sndseq(0xffffffffffffff9c, 0x0, 0x84501) 16:37:19 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x5, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:37:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x1c00, 0x0, 0x0, @none}}}, 0x1d) 16:37:19 executing program 1: openat$sndseq(0xffffffffffffff9c, 0x0, 0x84501) 16:37:19 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x404) [ 2897.767272] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 2897.769117] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 2898.948696] Bluetooth: hci3: command 0x0406 tx timeout [ 2899.012648] Bluetooth: hci1: command 0x0401 tx timeout [ 2900.996662] Bluetooth: hci3: command 0x0406 tx timeout [ 2901.060606] Bluetooth: hci1: command 0x0401 tx timeout [ 2903.109578] Bluetooth: hci1: command 0x0401 tx timeout 16:37:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8847000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:37:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_create_cis={{0x2064, 0x19}, {0x6, [{0x3, 0x8001}, {0x5, 0x7fff}, {0x0, 0x8001}, {0x4, 0x2}, {0x80, 0x95}, {0xc6ab, 0x857}]}}}, 0x1d) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) open_by_handle_at(r0, &(0x7f00000000c0)=@orangefs={0x14, 0x1, {"e157c21ccdfc92b224ba49c454975b3a", 0x1}}, 0x60201) 16:37:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x7) 16:37:29 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) 16:37:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x5}}}, 0x178) 16:37:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x7) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000003c0)={{r0}, 0x0, 0x6, @unused=[0x7, 0x86fe, 0x401, 0x3], @subvolid=0x4}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) fsetxattr$security_selinux(r3, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x5, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) close_range(r1, r3, 0x2) 16:37:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8848000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2908.612806] Bluetooth: hci1: command 0x0401 tx timeout [ 2910.660623] Bluetooth: hci1: command 0x0401 tx timeout [ 2912.708586] Bluetooth: hci1: command 0x0401 tx timeout [ 2914.756564] Bluetooth: hci1: command 0x0401 tx timeout 16:37:38 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8864000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:37:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="efd319bd19a0da1cfab25e7be81c3f3d6845cac287"], 0x7) 16:37:38 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) 16:37:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x7, @setup_sync_conn={{0x428, 0x11}, {0xc8, 0xfffffff8, 0x31, 0x2, 0x7, 0x12, 0xff}}}, 0x15) 16:37:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x2, 0x0, @none}}}, 0x1d) 16:37:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:37:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:38 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x20, "8ad0ec", 0xeb}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x2, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x7) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000100)={0xfffffffffffffffc, 0x81, 0x6, 0x1ff}) 16:37:38 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) 16:37:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x4, 0x0, @none}}}, 0x1d) 16:37:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x888effff00000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:37:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x2}}}, 0x178) 16:37:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="41200403000000"], 0x7) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x800) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/119, 0x77}, {&(0x7f00000001c0)=""/136, 0x88}], 0x2}, 0x2}, {{&(0x7f00000002c0), 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/167, 0xa7}], 0x1, &(0x7f0000000440)=""/254, 0xfe}, 0x2}, {{&(0x7f0000000540)=@pppoe, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/103, 0x67}, {&(0x7f0000000640)=""/41, 0x29}, {&(0x7f0000000680)=""/80, 0x50}], 0x3, &(0x7f0000000740)=""/212, 0xd4}, 0xffffffff}], 0x3, 0x40010100, &(0x7f0000000940)={r2, r3+60000000}) 16:37:38 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x5, 0x0, @none}}}, 0x1d) 16:37:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)="349d6583a0317d696234691fd5a3c2930fe87f4d55c72eff5dc3358218fae38c50f3f391e5e726e2ed2cd50e270b820a154f0e88b86539a556273eec89b6e82433b0b7eb4763") bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="071c04030000002034ddd9a2d938817f34e4503fc4144d04984fb27e8fc6f6d7c7b8f7251b2b144a23f1846d8d99b44c428bfa6f6404b8ef16f05130cdf8be3c95536e67ba7fbc79a6ef9c520990c10dcc1cd1313dcbb9578cd84cd4cd7cb0622e9e5e31c6754945a03f"], 0x7) [ 2916.804585] Bluetooth: hci1: command 0x0401 tx timeout [ 2918.852587] Bluetooth: hci1: command 0x0401 tx timeout [ 2920.900614] Bluetooth: hci1: command 0x0401 tx timeout [ 2922.948565] Bluetooth: hci1: command 0x0401 tx timeout [ 2924.996551] Bluetooth: hci1: command 0x0401 tx timeout 16:37:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x88a8ffff00000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:37:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'veth1_macvtap\x00', {0x2, 0x0, @dev}}) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x0, @loopback}}) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="071c0403000000d268591e77e693aa45ebeb8933be7d8a93bf3fb823aa1da4812720ce4ea71cb058544abe1b64", @ANYBLOB="203c93b76f5227ab84bd9fd049a2888cd60b94d33d171d96c502284d5fe4279ae49566f924f991f3e4a96a1a"], 0x7) 16:37:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="41200403000000"], 0x7) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x800) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/119, 0x77}, {&(0x7f00000001c0)=""/136, 0x88}], 0x2}, 0x2}, {{&(0x7f00000002c0), 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/167, 0xa7}], 0x1, &(0x7f0000000440)=""/254, 0xfe}, 0x2}, {{&(0x7f0000000540)=@pppoe, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/103, 0x67}, {&(0x7f0000000640)=""/41, 0x29}, {&(0x7f0000000680)=""/80, 0x50}], 0x3, &(0x7f0000000740)=""/212, 0xd4}, 0xffffffff}], 0x3, 0x40010100, &(0x7f0000000940)={r2, r3+60000000}) 16:37:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x4}}}, 0x178) 16:37:48 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="011c0403000087e315acdc198ea853514ea3f2b900"], 0x7) 16:37:48 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x6, 0x0, @none}}}, 0x1d) 16:37:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0xf8, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:37:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0c07ffffffffffff0000"], 0xb) 16:37:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x88caffff00000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:37:48 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x3, 0x0, "a97403", 0x7, 0x4}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x76f, [0xc831, 0x15], 0xfff}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01492ba3120000"], 0x7) write$bt_hci(r0, &(0x7f0000000080)={0x1, @link_key_reply={{0x40b, 0x16}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "75d0336552d71f409b6b7ae01dfaad54"}}}, 0x1a) 16:37:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x5}}}, 0x178) 16:37:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x1c, 0x0, @none}}}, 0x1d) 16:37:48 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x20000e94, 0x4) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) fsetxattr$security_selinux(r3, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0xffffffffffffff0e, r3, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x4, 0x6, 0x40, 0x0, 0x54f, 0x81001, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xff}, 0x40082, 0x1, 0x4, 0x6, 0x2, 0x9, 0x4169, 0x0, 0x80, 0x0, 0x7ff}, 0x0, 0x5, r4, 0xb) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f0000000180)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x3, 0x2}}}, 0x6) 16:37:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) [ 2926.818433] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 2927.812553] Bluetooth: hci1: command 0x0401 tx timeout [ 2928.004565] Bluetooth: hci3: command 0x0406 tx timeout [ 2929.860568] Bluetooth: hci1: command 0x0401 tx timeout [ 2931.908568] Bluetooth: hci1: command 0x0401 tx timeout [ 2933.956578] Bluetooth: hci1: command 0x0401 tx timeout 16:37:57 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 1) 16:37:57 executing program 7: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x800) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(0xffffffffffffffff, 0x2, 0x2) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000280)='net/ip_tables_matches\x00') ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f00000000c0)="b7e22677f0b17163711dbc84c7cebf0c4ccfe041b5aa35b62d5620dcd155438f8908") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="4100000001cd2cdef4910000", @ANYRES32=r1, @ANYBLOB="01000080000000002e2f66696c653000"]) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/nfs', 0x472000, 0x40) dup3(r7, r4, 0x80000) lseek(r6, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES64=r2, @ANYBLOB="0408000e000000008e2f02006c653000", @ANYRESHEX]) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x44, 0x7, 0xce, 0x36, 0x0, 0x40, 0xd23dd, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, @perf_config_ext={0x7ff, 0x19c}, 0x40000, 0x6e, 0x7fffffff, 0x3, 0x7f, 0x5, 0x4, 0x0, 0x4, 0x0, 0xd3}, 0x0, 0xc, 0xffffffffffffffff, 0x1) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="5c03000000000000000400008001c910fe8800000000000000000000000001140502000300010000"], 0x28) write$bt_hci(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="64a9100b855535dff8e6810f90ac69584b58e6ee6b802a9c296feda65a09a25a5763141a4fc3c3e31883c6e25021e23d64fea48f7f351ba7c34242c83ced139d07ad6b0bdd8e24b490981bec3c0dc5aa515ab6c1fc15b3721c2f362f94ad1f7bac811c3292efdc46db1a2e29c4d7db5a517a3376047b4637492c20"], 0x65) 16:37:57 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x6}}}, 0x178) 16:37:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x9}}}, 0x5) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:37:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:37:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:37:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x88f7ffff00000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:37:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="033c945ccd9838d8b3798e1697b17a60f59441f8467490e75fe651c5efb346c464c7"], 0x7) [ 2934.857322] FAULT_INJECTION: forcing a failure. [ 2934.857322] name failslab, interval 1, probability 0, space 0, times 0 [ 2934.859121] CPU: 1 UID: 0 PID: 21518 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2934.859152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2934.859164] Call Trace: [ 2934.859172] [ 2934.859181] dump_stack_lvl+0xfa/0x120 [ 2934.859217] should_fail_ex+0x4d7/0x5e0 [ 2934.859246] ? getname_flags.part.0+0x48/0x540 [ 2934.859267] should_failslab+0xc2/0x120 [ 2934.859299] kmem_cache_alloc_noprof+0x80/0x690 [ 2934.859386] ? lock_is_held_type+0x9e/0x120 16:37:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x88fbffff00000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2934.859423] ? getname_flags.part.0+0x48/0x540 [ 2934.859444] getname_flags.part.0+0x48/0x540 [ 2934.859468] getname_flags+0x95/0xe0 [ 2934.859503] do_sys_openat2+0x9f/0x1b0 [ 2934.859525] ? __pfx_do_sys_openat2+0x10/0x10 [ 2934.859550] ? __fget_files+0x20d/0x3b0 [ 2934.859585] __x64_sys_openat+0x142/0x200 [ 2934.859608] ? __pfx___x64_sys_openat+0x10/0x10 [ 2934.859628] ? ksys_write+0x1a3/0x240 [ 2934.859670] do_syscall_64+0xbf/0x390 [ 2934.859704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2934.859727] RIP: 0033:0x7f32a7ef6b19 [ 2934.859745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2934.859766] RSP: 002b:00007f32a546c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2934.859789] RAX: ffffffffffffffda RBX: 00007f32a8009f60 RCX: 00007f32a7ef6b19 [ 2934.859804] RDX: 0000000000084501 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 2934.859818] RBP: 00007f32a546c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2934.859831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2934.859844] R13: 00007ffc655df78f R14: 00007f32a546c300 R15: 0000000000022000 [ 2934.859877] 16:37:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, 0x0, 0x0) 16:37:57 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0x0) 16:37:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x2, @none}}}, 0x1d) [ 2936.004624] Bluetooth: hci1: command 0x0401 tx timeout [ 2938.052589] Bluetooth: hci1: command 0x0401 tx timeout [ 2940.100710] Bluetooth: hci1: command 0x0401 tx timeout [ 2942.148580] Bluetooth: hci1: command 0x0401 tx timeout [ 2944.196682] Bluetooth: hci1: command 0x0401 tx timeout 16:38:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x4, @none}}}, 0x1d) 16:38:08 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 2) 16:38:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8902000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:38:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x8}}}, 0x178) 16:38:08 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0x193, 0x1}}}, 0x7) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000200"], 0x7) 16:38:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x94}}}, 0x7) 16:38:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x4, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:38:08 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0x0) 16:38:08 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 3) 16:38:08 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) recvmmsg(r0, &(0x7f0000003f00)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f0000001380)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/234, 0xea}, {&(0x7f0000001340)=""/18, 0x12}], 0x6, &(0x7f0000001400)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002400)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002480)=""/108, 0x6c}, {&(0x7f0000002500)=""/237, 0xed}, {&(0x7f0000002600)=""/226, 0xe2}], 0x3, &(0x7f0000002740)=""/251, 0xfb}, 0x5}, {{&(0x7f0000002840)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/13, 0xd}, {&(0x7f0000002900)=""/73, 0x49}, {&(0x7f0000002980)=""/104, 0x68}, {&(0x7f0000002a00)=""/19, 0x13}, {&(0x7f0000002a40)=""/184, 0xb8}], 0x5, &(0x7f0000002b80)=""/79, 0x4f}, 0xffffffff}, {{&(0x7f0000002c00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002c80)=""/220, 0xdc}, {&(0x7f0000002d80)=""/193, 0xc1}, {&(0x7f0000002e80)=""/36, 0x24}], 0x3, &(0x7f0000002f00)=""/4096, 0x1000}, 0x1}], 0x4, 0x40000020, &(0x7f0000004000)={0x77359400}) 16:38:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x5, @none}}}, 0x1d) 16:38:08 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0x0) 16:38:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x177}}}, 0x178) 16:38:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x5, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) [ 2945.469310] FAULT_INJECTION: forcing a failure. [ 2945.469310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2945.470291] CPU: 1 UID: 0 PID: 21560 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2945.470308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.470316] Call Trace: [ 2945.470363] [ 2945.470369] dump_stack_lvl+0xfa/0x120 [ 2945.470392] should_fail_ex+0x4d7/0x5e0 [ 2945.470409] strncpy_from_user+0x3b/0x2f0 [ 2945.470430] getname_flags.part.0+0x8d/0x540 [ 2945.470446] getname_flags+0x95/0xe0 [ 2945.470461] do_sys_openat2+0x9f/0x1b0 [ 2945.470478] ? __pfx_do_sys_openat2+0x10/0x10 [ 2945.470492] ? __fget_files+0x20d/0x3b0 [ 2945.470512] __x64_sys_openat+0x142/0x200 [ 2945.470525] ? __pfx___x64_sys_openat+0x10/0x10 [ 2945.470536] ? ksys_write+0x1a3/0x240 [ 2945.470559] do_syscall_64+0xbf/0x390 [ 2945.470579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2945.470593] RIP: 0033:0x7f32a7ef6b19 [ 2945.470603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.470635] RSP: 002b:00007f32a546c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2945.470647] RAX: ffffffffffffffda RBX: 00007f32a8009f60 RCX: 00007f32a7ef6b19 [ 2945.470655] RDX: 0000000000084501 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 2945.470663] RBP: 00007f32a546c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2945.470670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2945.470677] R13: 00007ffc655df78f R14: 00007f32a546c300 R15: 0000000000022000 [ 2945.470696] 16:38:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="071c0403100000"], 0x7) 16:38:08 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 4) [ 2945.543206] FAULT_INJECTION: forcing a failure. [ 2945.543206] name failslab, interval 1, probability 0, space 0, times 0 [ 2945.544245] CPU: 1 UID: 0 PID: 21568 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2945.544261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.544268] Call Trace: [ 2945.544272] [ 2945.544277] dump_stack_lvl+0xfa/0x120 [ 2945.544300] should_fail_ex+0x4d7/0x5e0 [ 2945.544316] ? alloc_empty_file+0x58/0x1e0 [ 2945.544335] should_failslab+0xc2/0x120 [ 2945.544353] kmem_cache_alloc_noprof+0x80/0x690 [ 2945.544365] ? __is_insn_slot_addr+0x140/0x290 [ 2945.544386] ? alloc_empty_file+0x58/0x1e0 [ 2945.544403] alloc_empty_file+0x58/0x1e0 [ 2945.544423] path_openat+0xe0/0x2880 [ 2945.544446] ? __pfx_path_openat+0x10/0x10 [ 2945.544472] do_filp_open+0x1e8/0x450 [ 2945.544487] ? __pfx_do_filp_open+0x10/0x10 [ 2945.544509] ? find_held_lock+0x2b/0x80 [ 2945.544523] ? alloc_fd+0x2c1/0x560 [ 2945.544537] ? lock_release+0xc8/0x290 [ 2945.544566] ? _raw_spin_unlock+0x1e/0x40 [ 2945.544586] ? alloc_fd+0x2c1/0x560 [ 2945.544612] do_sys_openat2+0x104/0x1b0 [ 2945.544628] ? __pfx_do_sys_openat2+0x10/0x10 [ 2945.544644] ? __fget_files+0x20d/0x3b0 [ 2945.544662] __x64_sys_openat+0x142/0x200 [ 2945.544674] ? __pfx___x64_sys_openat+0x10/0x10 [ 2945.544685] ? ksys_write+0x1a3/0x240 [ 2945.544708] do_syscall_64+0xbf/0x390 [ 2945.544727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2945.544740] RIP: 0033:0x7f32a7ef6b19 [ 2945.544749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.544761] RSP: 002b:00007f32a546c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2945.544773] RAX: ffffffffffffffda RBX: 00007f32a8009f60 RCX: 00007f32a7ef6b19 [ 2945.544781] RDX: 0000000000084501 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 2945.544789] RBP: 00007f32a546c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2945.544796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2945.544803] R13: 00007ffc655df78f R14: 00007f32a546c300 R15: 0000000000022000 [ 2945.544821] 16:38:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8906000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:38:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x500}}}, 0x178) 16:38:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x7, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:38:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x600}}}, 0x178) [ 2946.244605] Bluetooth: hci1: command 0x0401 tx timeout [ 2948.292638] Bluetooth: hci1: command 0x0401 tx timeout [ 2950.340705] Bluetooth: hci1: command 0x0401 tx timeout [ 2952.388597] Bluetooth: hci1: command 0x0401 tx timeout [ 2954.436665] Bluetooth: hci1: command 0x0401 tx timeout 16:38:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x6, @none}}}, 0x1d) 16:38:17 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x100000000, 0x5}) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x2, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="021c0403000000"], 0x7) 16:38:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x892f000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:38:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:38:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x7701}}}, 0x178) 16:38:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000080)="4ea7ac0b00a17579f79cbc602bf1d482c134cbb0d224270e72c5bd5e2338430e4514c0b9f13f481446fccbc3a79d44a744d6aff77b7476ac3761cebdba691749f8ccf2aaff8362d9abdb70f965f4f9eee38024be242160ccb7548b170c29f7676214360bc22a3abb007f65d00e746790f2ad") write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:38:17 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 5) 16:38:18 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x4, @none}}}, 0x1d) 16:38:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x1c, @none}}}, 0x1d) 16:38:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xdc05000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:38:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:38:18 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 6) 16:38:18 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f0000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81001f80}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x4, 0x81, 0x1, 0xc3, 0x0, 0x8, 0x63a44, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5e, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x210, 0xa0000000000, 0x1ff, 0x2, 0x4, 0x0, 0x4, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x3, r2, 0x0) [ 2955.515071] FAULT_INJECTION: forcing a failure. [ 2955.515071] name failslab, interval 1, probability 0, space 0, times 0 [ 2955.516783] CPU: 1 UID: 0 PID: 21624 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2955.516813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2955.516826] Call Trace: [ 2955.516834] [ 2955.516842] dump_stack_lvl+0xfa/0x120 [ 2955.516879] should_fail_ex+0x4d7/0x5e0 [ 2955.516909] ? security_file_alloc+0x35/0x130 [ 2955.516940] should_failslab+0xc2/0x120 [ 2955.516973] kmem_cache_alloc_noprof+0x80/0x690 [ 2955.516996] ? __create_object+0x59/0x80 [ 2955.517023] ? security_file_alloc+0x35/0x130 [ 2955.517053] security_file_alloc+0x35/0x130 [ 2955.517086] init_file+0x95/0x4c0 [ 2955.517122] alloc_empty_file+0x76/0x1e0 [ 2955.517158] path_openat+0xe0/0x2880 [ 2955.517200] ? __pfx_path_openat+0x10/0x10 [ 2955.517239] do_filp_open+0x1e8/0x450 [ 2955.517267] ? __pfx_do_filp_open+0x10/0x10 [ 2955.517308] ? find_held_lock+0x2b/0x80 [ 2955.517332] ? alloc_fd+0x2c1/0x560 [ 2955.517357] ? lock_release+0xc8/0x290 [ 2955.517392] ? _raw_spin_unlock+0x1e/0x40 [ 2955.517418] ? alloc_fd+0x2c1/0x560 [ 2955.517454] do_sys_openat2+0x104/0x1b0 [ 2955.517483] ? __pfx_do_sys_openat2+0x10/0x10 [ 2955.517508] ? __fget_files+0x20d/0x3b0 [ 2955.517542] __x64_sys_openat+0x142/0x200 [ 2955.517565] ? __pfx___x64_sys_openat+0x10/0x10 [ 2955.517586] ? ksys_write+0x1a3/0x240 [ 2955.517627] do_syscall_64+0xbf/0x390 [ 2955.517662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2955.517686] RIP: 0033:0x7f32a7ef6b19 [ 2955.517703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2955.517725] RSP: 002b:00007f32a546c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2955.517747] RAX: ffffffffffffffda RBX: 00007f32a8009f60 RCX: 00007f32a7ef6b19 [ 2955.517762] RDX: 0000000000084501 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 2955.517776] RBP: 00007f32a546c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2955.517790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2955.517803] R13: 00007ffc655df78f R14: 00007f32a546c300 R15: 0000000000022000 [ 2955.517836] [ 2956.484648] Bluetooth: hci1: command 0x0401 tx timeout [ 2958.532667] Bluetooth: hci1: command 0x0401 tx timeout [ 2960.580606] Bluetooth: hci1: command 0x0401 tx timeout [ 2962.628609] Bluetooth: hci1: command 0x0401 tx timeout 16:38:27 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 7) 16:38:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x2}}}, 0x178) 16:38:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) (fail_nth: 1) 16:38:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$bt_hci(r1, &(0x7f00000001c0)={0x1, @accept_phy_link={{0x436, 0x152}, {0xc9, 0x9, 0x3, "e814b56e3e03366dc9acfbfeef169344deac802b852f25bca2c47fc64a5bd932fb61bbb9fef233bff6513bd5e647d31f6f7bee49e42b9e25482271c1361b61789e66642da56a4c2aa8aa82ca034d985dae789c8fbf13e6b1d02f1951887c016d5596358c350bff65a7a96de4dd14741325652710fd1255d8c9b68b0fa58bc317b7b6112a2d4e19d1eb59896edf257c6a50fe06a0b957bff6ee600d7e3fc726007a02b35b6e0223acd3312bcb33126e1fc8cfadca0cb3d17e9aa300aba3ffd9c21dbd35c7627b932661ec5e235018463d89b3685e58759951a0d1a15c5c67125ce3fe6ab42d76af33515bc449588afe0a3ea3d77123cecc62b48b00ec83114387ec10c698022af92220abe57b0adf285195d946a055454d5fa01af694d30d64c984eacd0d9b39fb0feaf7b04c95eb0df12446ef2119630befb68b16346c204b44f2715fdd4a017f6510ae0016434d14"}}}, 0x156) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:38:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) (fail_nth: 1) 16:38:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xe005000000000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:38:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:38:27 executing program 7: syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0xff, 0x800}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000540)={0x1f, 0x1}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000000301010300000000000000000300000258000e800c000280050001003a0000000c000280050001000100000006000340000300000c000280050001001100000006000340000300000c000280050001000600000006000340000100000c000280050001003a00000068001080080001400000020608000340000000070800024000000008080002400000112e080003400010000008000140ffffffff080001400000007f08000140fffffffd0800014000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000580)={0x0, 'virt_wifi0\x00', {}, 0x8}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd8, 0x464, 0x20, 0x70bd26, 0x25dfdbfd, "52df5cc539a05a2d662b779f4353c8338d9f342daf9c4e7af7a3342bc71534cea519e21d4792a969b70923d4325368bacb6bee9fc6bca54bba932f48ff4ed8ca32989c69e856f6787e006fcd10d48bb2be780db6dd74e215f6b0483f7e78f8f7147a886a194fe030060da22d609bbe86b5bb9275d9aa3510c496f112dab35f8366c249e3a7f7002977a4003add38bec41b1faf23172295cc918d1ea71b61c4e082486a95255ae070502a91d09c2e7fae2c68138dcc44cfebaf3adabaafd9705afa8a9fa9f9bb", ["", "", ""]}, 0xd8}, 0x1, 0x0, 0x0, 0x44041}, 0x81) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x55}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x58, 0x45}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10, 0x75}}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9bb}}, './file0\x00'}) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f0000000280)=""/68, &(0x7f0000000300)=0x44) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) [ 2964.281084] FAULT_INJECTION: forcing a failure. [ 2964.281084] name failslab, interval 1, probability 0, space 0, times 0 [ 2964.282115] CPU: 1 UID: 0 PID: 21637 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2964.282132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2964.282140] Call Trace: [ 2964.282144] [ 2964.282149] dump_stack_lvl+0xfa/0x120 [ 2964.282172] should_fail_ex+0x4d7/0x5e0 [ 2964.282193] should_failslab+0xc2/0x120 [ 2964.282211] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 2964.282227] ? __alloc_skb+0x2ab/0x370 [ 2964.282240] ? kasan_unpoison+0x27/0x60 [ 2964.282259] ? __alloc_skb+0x2ab/0x370 [ 2964.282269] __alloc_skb+0x2ab/0x370 [ 2964.282281] ? __pfx___alloc_skb+0x10/0x10 [ 2964.282301] alloc_skb_with_frags+0x8f/0x7c0 [ 2964.282319] ? __pfx_perf_trace_lock+0x10/0x10 [ 2964.282337] ? __alloc_frozen_pages_noprof+0x296/0x1f20 [ 2964.282359] sock_alloc_send_pskb+0x7cb/0x950 [ 2964.282370] ? lock_acquire+0x15e/0x2f0 [ 2964.282387] ? avc_has_perm_noaudit+0x59/0x3d0 [ 2964.282408] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 2964.282429] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2964.282441] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2964.282462] ? sock_has_perm+0x21c/0x2b0 [ 2964.282477] ? __pfx_sock_has_perm+0x10/0x10 [ 2964.282491] hci_sock_sendmsg+0x190/0x2270 [ 2964.282514] ? perf_trace_lock+0xb5/0x5d0 [ 2964.282533] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2964.282556] sock_write_iter+0x57e/0x610 [ 2964.282575] ? __pfx_sock_write_iter+0x10/0x10 [ 2964.282600] ? security_file_permission+0x22/0x90 [ 2964.282622] vfs_write+0xbe9/0x1150 [ 2964.282639] ? __pfx_sock_write_iter+0x10/0x10 [ 2964.282656] ? __fget_files+0x34/0x3b0 [ 2964.282670] ? __pfx_vfs_write+0x10/0x10 [ 2964.282699] ksys_write+0x1ef/0x240 [ 2964.282714] ? __pfx_ksys_write+0x10/0x10 [ 2964.282735] do_syscall_64+0xbf/0x390 [ 2964.282758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2964.282774] RIP: 0033:0x7f69f1ff5b19 [ 2964.282784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2964.282796] RSP: 002b:00007f69ef56b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2964.282808] RAX: ffffffffffffffda RBX: 00007f69f2108f60 RCX: 00007f69f1ff5b19 [ 2964.282816] RDX: 000000000000001d RSI: 0000000020000000 RDI: 0000000000000004 [ 2964.282881] RBP: 00007f69ef56b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2964.282888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2964.282896] R13: 00007ffdb0d049df R14: 00007f69ef56b300 R15: 0000000000022000 [ 2964.282915] [ 2964.324408] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.7'. 16:38:27 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 8) [ 2964.380881] FAULT_INJECTION: forcing a failure. [ 2964.380881] name failslab, interval 1, probability 0, space 0, times 0 [ 2964.382792] CPU: 1 UID: 0 PID: 21648 Comm: syz-executor.3 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2964.382825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2964.382839] Call Trace: [ 2964.382847] [ 2964.382856] dump_stack_lvl+0xfa/0x120 [ 2964.382897] should_fail_ex+0x4d7/0x5e0 [ 2964.382929] should_failslab+0xc2/0x120 [ 2964.382964] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 2964.382992] ? __alloc_skb+0x2ab/0x370 [ 2964.383073] ? kasan_unpoison+0x27/0x60 [ 2964.383110] ? __alloc_skb+0x2ab/0x370 [ 2964.383130] __alloc_skb+0x2ab/0x370 [ 2964.383154] ? __pfx___alloc_skb+0x10/0x10 [ 2964.383192] alloc_skb_with_frags+0x8f/0x7c0 [ 2964.383224] ? __pfx_perf_trace_lock+0x10/0x10 [ 2964.383258] ? __alloc_frozen_pages_noprof+0x296/0x1f20 [ 2964.383300] sock_alloc_send_pskb+0x7cb/0x950 [ 2964.383324] ? lock_acquire+0x15e/0x2f0 [ 2964.383355] ? avc_has_perm_noaudit+0x59/0x3d0 [ 2964.383395] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 2964.383436] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2964.383460] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2964.383508] ? sock_has_perm+0x21c/0x2b0 [ 2964.383529] ? __pfx_sock_has_perm+0x10/0x10 [ 2964.383556] hci_sock_sendmsg+0x190/0x2270 [ 2964.383595] ? perf_trace_lock+0xb5/0x5d0 [ 2964.383631] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2964.383678] sock_write_iter+0x57e/0x610 [ 2964.383713] ? __pfx_sock_write_iter+0x10/0x10 [ 2964.383763] ? security_file_permission+0x22/0x90 [ 2964.383803] vfs_write+0xbe9/0x1150 [ 2964.383836] ? __pfx_sock_write_iter+0x10/0x10 [ 2964.383868] ? __fget_files+0x34/0x3b0 [ 2964.383897] ? __pfx_vfs_write+0x10/0x10 [ 2964.383952] ksys_write+0x1ef/0x240 [ 2964.383982] ? __pfx_ksys_write+0x10/0x10 [ 2964.384024] do_syscall_64+0xbf/0x390 [ 2964.384063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2964.384087] RIP: 0033:0x7feda1424b19 [ 2964.384106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2964.384162] RSP: 002b:00007fed9e99a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2964.384185] RAX: ffffffffffffffda RBX: 00007feda1537f60 RCX: 00007feda1424b19 [ 2964.384202] RDX: 0000000000000027 RSI: 0000000020000080 RDI: 0000000000000004 [ 2964.384216] RBP: 00007fed9e99a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2964.384230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2964.384244] R13: 00007ffce1d975ff R14: 00007fed9e99a300 R15: 0000000000022000 [ 2964.384278] 16:38:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x2}}}, 0x1d) 16:38:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1000, &(0x7f0000000140)=0x2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="071c0000000000efa8614c159683b97d97fa1d58262c62cca574f4f2107468900ac34513a0c0efa1e9ef52db"], 0x7) ioctl(r0, 0x2, &(0x7f0000000080)="4aea9ec3256484c0ec7c26f19402b040b9fda751d140cf6a5595ad8d4175b8edbb1749f7c01835c5ec3843eb219c7cf5c5dcecfbffe8d6c139cb7befdb227b8b8ba7c184348db18de45f9d3bf66ab417e465c57174e0790f39e26f6df172508a807516187758da60a880d8264c105a") [ 2964.482730] FAULT_INJECTION: forcing a failure. [ 2964.482730] name failslab, interval 1, probability 0, space 0, times 0 [ 2964.484795] CPU: 1 UID: 0 PID: 21654 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2964.484827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2964.484841] Call Trace: [ 2964.484849] [ 2964.484858] dump_stack_lvl+0xfa/0x120 [ 2964.484899] should_fail_ex+0x4d7/0x5e0 [ 2964.484933] should_failslab+0xc2/0x120 [ 2964.484972] __kmalloc_cache_noprof+0x81/0x6b0 [ 2964.485019] ? __pfx___mutex_lock+0x10/0x10 [ 2964.485057] ? seq_create_client1+0x4c/0x550 [ 2964.485083] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2964.485125] ? seq_create_client1+0x4c/0x550 [ 2964.485152] seq_create_client1+0x4c/0x550 [ 2964.485182] snd_seq_open+0x5b/0x650 [ 2964.485211] ? __pfx_snd_seq_open+0x10/0x10 [ 2964.485242] snd_open+0x270/0x440 [ 2964.485276] ? __pfx_snd_open+0x10/0x10 [ 2964.485307] chrdev_open+0x234/0x690 [ 2964.485346] ? __pfx_chrdev_open+0x10/0x10 [ 2964.485384] ? lock_release+0xc8/0x290 [ 2964.485431] do_dentry_open+0x71c/0x1420 [ 2964.485476] ? __pfx_chrdev_open+0x10/0x10 [ 2964.485514] ? inode_permission+0x134/0x610 [ 2964.485561] vfs_open+0x82/0x3f0 [ 2964.485581] ? may_open+0x1f3/0x420 [ 2964.485608] path_openat+0x1c3f/0x2880 [ 2964.485657] ? __pfx_path_openat+0x10/0x10 [ 2964.485703] do_filp_open+0x1e8/0x450 [ 2964.485737] ? __pfx_do_filp_open+0x10/0x10 [ 2964.485785] ? find_held_lock+0x2b/0x80 [ 2964.485811] ? alloc_fd+0x2c1/0x560 [ 2964.485841] ? lock_release+0xc8/0x290 [ 2964.485885] ? alloc_fd+0x2c1/0x560 [ 2964.485926] do_sys_openat2+0x104/0x1b0 [ 2964.485950] ? __pfx_do_sys_openat2+0x10/0x10 [ 2964.485977] ? __fget_files+0x20d/0x3b0 [ 2964.486017] __x64_sys_openat+0x142/0x200 [ 2964.486042] ? __pfx___x64_sys_openat+0x10/0x10 [ 2964.486065] ? ksys_write+0x1a3/0x240 [ 2964.486167] do_syscall_64+0xbf/0x390 [ 2964.486211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2964.486235] RIP: 0033:0x7f32a7ef6b19 [ 2964.486254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2964.486276] RSP: 002b:00007f32a546c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2964.486299] RAX: ffffffffffffffda RBX: 00007f32a8009f60 RCX: 00007f32a7ef6b19 [ 2964.486315] RDX: 0000000000084501 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 2964.486330] RBP: 00007f32a546c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2964.486345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2964.486359] R13: 00007ffc655df78f R14: 00007f32a546c300 R15: 0000000000022000 [ 2964.486394] 16:38:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x4}}}, 0x178) 16:38:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) (fail_nth: 2) 16:38:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) (fail_nth: 2) 16:38:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xeffdffff00000000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2964.663858] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2964.676569] Bluetooth: hci1: command 0x0401 tx timeout 16:38:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x5}}}, 0x178) 16:38:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x4}}}, 0x1d) [ 2966.724574] Bluetooth: hci1: command 0x0401 tx timeout [ 2968.772645] Bluetooth: hci1: command 0x0401 tx timeout [ 2970.820605] Bluetooth: hci1: command 0x0401 tx timeout [ 2972.868605] Bluetooth: hci1: command 0x0401 tx timeout [ 2974.916637] Bluetooth: hci1: command 0x0401 tx timeout 16:38:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="071c040fcf5fe7"], 0x7) 16:38:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x5}}}, 0x1d) 16:38:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x6}}}, 0x178) 16:38:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) (fail_nth: 3) 16:38:38 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 9) 16:38:38 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) (fail_nth: 3) 16:38:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)="3e1bcd60000d2fe8b42e94313124fac88969a18da361b62b5ecabfc310") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:38:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xfffffffffffff000, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:38:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f00000000c0)="e040b7dac548f74404ad0d43dcbe20efea31a2ba0ccf724351b1d38f3ead897819121a2f7442034453f9f2037e49a7838d") write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="071c040300247ee45acb81a79744337fd36a1200004b62726d179b761e214f4264901d2d27d8422e34a41d395e0f0ded2cc7771241416484cb5bb9f3d9e6a2c905c4b42b00f8ed2e6c91ac038484c078eb9c2b33032615b2a6e82ae9e822fe0ad7c119bddee7bbd84dd61ac75a5bad8c67ab744e0bb20047e8b221f0461fa392b0e6178decb73852064c00a553ab21439c536cc3a341f654230d9010"], 0x7) 16:38:38 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 10) 16:38:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x6}}}, 0x1d) 16:38:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) (fail_nth: 4) 16:38:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x3) 16:38:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) (fail_nth: 4) 16:38:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:38:39 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_io_uring_complete(0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x6) [ 2976.364639] FAULT_INJECTION: forcing a failure. [ 2976.364639] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.366556] CPU: 1 UID: 0 PID: 21714 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2976.366587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.366600] Call Trace: [ 2976.366607] [ 2976.366616] dump_stack_lvl+0xfa/0x120 [ 2976.366653] should_fail_ex+0x4d7/0x5e0 [ 2976.366683] should_failslab+0xc2/0x120 [ 2976.366715] __kmalloc_cache_noprof+0x81/0x6b0 [ 2976.366751] ? trace_kmalloc+0x1f/0xb0 [ 2976.366778] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 2976.366812] ? snd_seq_pool_new+0x44/0x240 [ 2976.366848] ? snd_seq_pool_new+0x44/0x240 [ 2976.366876] snd_seq_pool_new+0x44/0x240 [ 2976.366905] seq_create_client1+0x6c/0x550 [ 2976.366932] snd_seq_open+0x5b/0x650 [ 2976.366957] ? __pfx_snd_seq_open+0x10/0x10 [ 2976.366983] snd_open+0x270/0x440 [ 2976.367012] ? __pfx_snd_open+0x10/0x10 [ 2976.367037] chrdev_open+0x234/0x690 [ 2976.367069] ? __pfx_chrdev_open+0x10/0x10 [ 2976.367099] ? lock_release+0xc8/0x290 [ 2976.367139] do_dentry_open+0x71c/0x1420 [ 2976.367170] ? __pfx_chrdev_open+0x10/0x10 [ 2976.367201] ? inode_permission+0x134/0x610 [ 2976.367238] vfs_open+0x82/0x3f0 [ 2976.367257] ? may_open+0x1f3/0x420 [ 2976.367282] path_openat+0x1c3f/0x2880 [ 2976.367404] ? __pfx_path_openat+0x10/0x10 [ 2976.367450] do_filp_open+0x1e8/0x450 [ 2976.367485] ? __pfx_do_filp_open+0x10/0x10 [ 2976.367526] ? find_held_lock+0x2b/0x80 [ 2976.367549] ? alloc_fd+0x2c1/0x560 [ 2976.367573] ? lock_release+0xc8/0x290 [ 2976.367610] ? alloc_fd+0x2c1/0x560 [ 2976.367646] do_sys_openat2+0x104/0x1b0 [ 2976.367667] ? __pfx_do_sys_openat2+0x10/0x10 [ 2976.367693] ? __fget_files+0x20d/0x3b0 [ 2976.367727] __x64_sys_openat+0x142/0x200 [ 2976.367750] ? __pfx___x64_sys_openat+0x10/0x10 [ 2976.367771] ? ksys_write+0x1a3/0x240 [ 2976.367812] do_syscall_64+0xbf/0x390 [ 2976.367848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2976.367870] RIP: 0033:0x7f32a7ef6b19 [ 2976.367889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.367910] RSP: 002b:00007f32a546c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2976.367932] RAX: ffffffffffffffda RBX: 00007f32a8009f60 RCX: 00007f32a7ef6b19 [ 2976.367947] RDX: 0000000000084501 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 2976.367961] RBP: 00007f32a546c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.367974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2976.367987] R13: 00007ffc655df78f R14: 00007f32a546c300 R15: 0000000000022000 [ 2976.368021] 16:38:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="711ce4ad24f6"], 0x7) 16:38:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) (fail_nth: 5) 16:38:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) [ 2976.530915] FAULT_INJECTION: forcing a failure. [ 2976.530915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2976.532781] CPU: 1 UID: 0 PID: 21728 Comm: syz-executor.3 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2976.532812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.532825] Call Trace: [ 2976.532833] [ 2976.532841] dump_stack_lvl+0xfa/0x120 [ 2976.532878] should_fail_ex+0x4d7/0x5e0 [ 2976.532909] _copy_from_iter+0x1dc/0x1660 [ 2976.532937] ? lock_acquire+0x15e/0x2f0 [ 2976.532968] ? __virt_addr_valid+0x1c6/0x5d0 [ 2976.532991] ? find_held_lock+0x2b/0x80 [ 2976.533016] ? __pfx__copy_from_iter+0x10/0x10 [ 2976.533039] ? lock_release+0xc8/0x290 [ 2976.533084] ? __virt_addr_valid+0x100/0x5d0 [ 2976.533114] ? __check_object_size+0x579/0x880 [ 2976.533145] hci_sock_sendmsg+0x402/0x2270 [ 2976.533181] ? perf_trace_lock+0xb5/0x5d0 [ 2976.533215] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2976.533259] sock_write_iter+0x57e/0x610 [ 2976.533292] ? __pfx_sock_write_iter+0x10/0x10 [ 2976.533339] ? security_file_permission+0x22/0x90 [ 2976.533378] vfs_write+0xbe9/0x1150 [ 2976.533408] ? __pfx_sock_write_iter+0x10/0x10 [ 2976.533519] ? __fget_files+0x34/0x3b0 [ 2976.533545] ? __pfx_vfs_write+0x10/0x10 [ 2976.533597] ksys_write+0x1ef/0x240 [ 2976.533625] ? __pfx_ksys_write+0x10/0x10 [ 2976.533664] do_syscall_64+0xbf/0x390 [ 2976.533699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2976.533722] RIP: 0033:0x7feda1424b19 [ 2976.533740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.533762] RSP: 002b:00007fed9e99a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2976.533784] RAX: ffffffffffffffda RBX: 00007feda1537f60 RCX: 00007feda1424b19 [ 2976.533799] RDX: 0000000000000027 RSI: 0000000020000080 RDI: 0000000000000004 [ 2976.533813] RBP: 00007fed9e99a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.533826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2976.533839] R13: 00007ffce1d975ff R14: 00007fed9e99a300 R15: 0000000000022000 [ 2976.533872] [ 2976.964635] Bluetooth: hci1: command 0x0401 tx timeout [ 2979.012661] Bluetooth: hci1: command 0x0401 tx timeout [ 2981.060589] Bluetooth: hci1: command 0x0401 tx timeout [ 2983.108594] Bluetooth: hci1: command 0x0401 tx timeout [ 2985.156583] Bluetooth: hci1: command 0x0401 tx timeout 16:38:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x5, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:38:49 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 11) 16:38:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="3b8f0b3a0a6396e070dff1b557f76a3ba0eee7766e0f2fcebc2e2c5a1efd5e332aed743af7565f8e864c6efeabf326a4e7ec7db6cc") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) pread64(r2, &(0x7f0000000040)=""/51, 0x33, 0x9) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000100)={0x7, @read_enc_key_size={{0x1408, 0x2}, {0xc8}}}, 0x6) 16:38:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x1c}}}, 0x1d) 16:38:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="11070002000000"], 0x7) 16:38:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) (fail_nth: 6) 16:38:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x404) 16:38:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2986.574882] FAULT_INJECTION: forcing a failure. [ 2986.574882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2986.575862] CPU: 1 UID: 0 PID: 21745 Comm: syz-executor.3 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2986.575879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2986.575887] Call Trace: [ 2986.575892] [ 2986.575897] dump_stack_lvl+0xfa/0x120 [ 2986.575924] should_fail_ex+0x4d7/0x5e0 [ 2986.575943] _copy_to_user+0x32/0xd0 [ 2986.575960] simple_read_from_buffer+0xe0/0x180 [ 2986.575978] proc_fail_nth_read+0x18a/0x240 [ 2986.575997] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2986.576015] ? security_file_permission+0x22/0x90 [ 2986.576036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2986.576053] vfs_read+0x1eb/0xc70 [ 2986.576073] ? __pfx_vfs_read+0x10/0x10 [ 2986.576088] ? lock_release+0xc8/0x290 [ 2986.576109] ? __fget_files+0x20d/0x3b0 [ 2986.576131] ksys_read+0x121/0x240 [ 2986.576145] ? __pfx_ksys_read+0x10/0x10 [ 2986.576166] do_syscall_64+0xbf/0x390 [ 2986.576187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2986.576200] RIP: 0033:0x7feda13d769c [ 2986.576210] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2986.576222] RSP: 002b:00007fed9e99a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2986.576234] RAX: ffffffffffffffda RBX: 0000000000000027 RCX: 00007feda13d769c [ 2986.576242] RDX: 000000000000000f RSI: 00007fed9e99a1e0 RDI: 0000000000000003 [ 2986.576283] RBP: 00007fed9e99a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2986.576290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2986.576297] R13: 00007ffce1d975ff R14: 00007fed9e99a300 R15: 0000000000022000 [ 2986.576317] 16:38:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) [ 2987.204634] Bluetooth: hci1: command 0x0401 tx timeout [ 2989.252599] Bluetooth: hci1: command 0x0401 tx timeout [ 2991.300612] Bluetooth: hci1: command 0x0401 tx timeout [ 2993.348626] Bluetooth: hci1: command 0x0401 tx timeout [ 2995.396575] Bluetooth: hci1: command 0x0401 tx timeout [ 2997.445519] Bluetooth: hci1: command 0x0401 tx timeout 16:39:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0xfdef) 16:39:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:00 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x7, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:00 executing program 2: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f0000000100)={0x12c8, 0x15, 0x100, 0x70bd29, 0x25dfdbfd, {0xb, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "87c3756add04570e89842b6f1ba80a13e837b2a2e26aa73821105003334f77ca9a3a856575b93c1f7c2539afd0718af339d4e5004be90cc2bc5e2e34f513dd02fc21f396f28f7886a067aac378cec107d268f98f9223b21268cd1d747df07b3fa3d7a417d362f917b85b79970840badf4fa9f46c101f45924a721c3fd7fa74e22a6eadaa6d1476869235f2c600b791a150dd63d2b0221942779bb971c9bcb691ae01e9c9f0cc37759886753444629428f8cfb137cf20af07b7027e63823d0df83562366b89413e9aa2e995930674ff0a83f7ea8fcbd9c9a26e29281fcda7319f697973f42437a076c3427a2c897c085bbb63e33429eab14ea6c93c7cd88f54cfdd557afdc9ad9abcde9c5d7455cf4f040d67fe1d63da6e46d6100f7d631e1f10fbe522fbce72ccd1c3ae42ea45ee70e5d7428a00c3eefe0a96a7f184d04af6e6fb312b95a94f4c7fde99f097cd5ede0ff9c7cc9902fa7cc6e5bb65b1fc312142d7c9ff3cb0d189858830a501850fddc1a0404db82defb52d5fae40ff88f327517e48b931ebb34223450db78d6f83d2e720343f5a6e15595dc2a4b8f9b0256da5d28227b4ba799ca0f6b143c1c61d6c6dfb2287c58fbc2d5b1c118ff6057495e1008a55113a096d30881a589ea422f940997749bc7afdd2faa3d58562ac561ecd097ca69388e3e274d0aaaa86ccfcfddefb29807d08ef6b99ab2878b610f6e8c646ce515d859bc4734ea15d3576a569ba2edfa4b5b806de06bf7e3ec1f82b77685f6332912af2a594aa0177b903ba4e97abdc13217cbf1051c1227eca21e28b2d62010c04e500f34869b103d6af34e99d8ad277723f05fad8f8976b7389814e65d26f31aa9e5908064a102a80590645097a8a6be1a65809aa95d834d950fcda78fb26a5c372690f3252995e107113e761266448051af876ff817341aca14c86cf0814cb31e9e79cf9c56d6831c7712d3f0dcb12bad86d8c056d1326c1b1425c1044a0395a2789d4e5b795a89837c053e58af4f766307f9bb8a3a5592f98190423ae4622b6d0f183652f969c851a3df76eaa6c4f56b5a225590f8a1b7342828eacdfe5f2704a4064031f205cbd18a41ee095f706207d35a37b75cd04df72849d9e1d644a2ef7f6a181ef54114436f735fa5f49f3fd6bf49513bed2204460355ab7101fd038591d36d3943c4e0747293d4790463635ef964e9911a62ddc650403c7f204d0411fd9c1d875560cc143d8855bcdd08c95840da0df16598e8e9f791740ee9c853954732acd59d7c37ac8c0e2b1ba862669b17073a5d9441e2e5b68f9e29251f9f25567775599710b0e0b7f5b8097d5aecd2b66ad81b52a1e6563e8b404080d08c28b61f215351315abd08f03fd509258664addb63494f895318c5e11d22d4426e31a73a3e0c55a32c8b36b002557eda190cc294f460ae78f4cab87e3c9f1d2210ad052421c0a524be291afef8ace66ab822d779c8115af166231ae861e6beb094029eb652b95cd6ba9026cc437166720c52bc9f0445775b7bd9a55c53f7706dd7ce14d6865bd6959ec415d1355e0909cd928c4b6e1fb0cf35efe2fef8416e1a3bbd1b3099d3b6edba481cfbf31a697ba8847fee08056b31704ecba40e5beff62b78729a24ae08d129248ee10c21d02be02f964c4ebefd7a2e45c53ee45b3c78b0c6aa4b9dc57dd1acd63450584b40ac439f74f3f70ec05e5949059e52eefc9804d27336cf892dfab776ca8f22e8e74efaf1b950b88ee6aec65a7aa07ff23f655cbcf590f09cdf209064573bf3737764a40db907324540707d3153a3b093a221e8a78692314b4721857bed8c7f195038cf9785d57af303013fd24eebf342a07c1d30b015d5316be484d228593111362513ac0c5a309d1effd04c2078f727d391df1b6af2f20dbf3fbd1fb92c470acc65d931e07a677efd9dc9c6ecf09f33bd301e6198cc8d60158c90b031c10847b1c0220f0752f7e6a3f4e4e281e6edc96f1c5b17ee87fd0d568f84efc22b5a02fb2fdcdab1d3d611d00d273c7a2a520e1ee3a171f303758283ddfe90e9a9b7e8be9fd7aa2b93ecb8285b980d2660cf889844be313b927b4c6f9c7286d16b4b2fe7c5e045ac7128351206e4bf183e9e0cb14ae43224563645fb1e4b4258a5cc2864a60073c42ffe94eeb21646e3e56518831689fa753e50d966016125371bad2dee8ef49f125ead83fd2d77b4072ddd0fe9dc6185b6b728dc245dce48d28ec0fc6836e0cb0c135f14bacefd4ac3357c15539456bad63a6696403b7b070c22de7601fcaea1b05f639076a40a659de5bb542cdd12ee56123b0ca3bbc6e4b5e5ad85ae6552e5eb50edd8618bafaba8a3b7b6f855c2b0b56a1c54cd5e851baed558543b6b7f17b6f2dd6458d2693a4c2612ca70c2edf1a1483fbca76ec13d1daf885b17ec762dcd61133651b9cdd19fd1eb1602ea5cf2eac56793a5e293a509198b38f430c92e2f33a7e68defeb3e3aefb73b26133e62efc12f21164b2b739014507e28a16a8a7e631523c0196400814cf10891156caacf51f57c668b984a974c30b5b4c6b60eee7c3d2127cf4a66c399faa9b5e35177d5d1e7cb8ea4a432432a16c44ed4ce1ae66f360f7afaa848f952810061c4e3e65c0ca03e454b335486c6b8f389f7920fc2187fa706bd7cdebabcc670a7eaa42533e1aaaab20c2ff7f20d0f0b9cfc7498b3d1154e1de39e15c0a9284e01cba6130bb09259cce65dd7f4e9b4eddc1bf1cf1af6072b549daaa584a60d3be61a86da0aa8f08ca405f212568320df305a04de6c18c72d5a7135be3dbcd3459b265e1efa5ac128c2f27a0fa29829acd624f96445e2bc0b888ac5259bf6e2ea554f58b7b62c310e7602cfad6984f2a25af2edf036b5d2ff2e3d87959de2227f51da236d8df3f59901ceba4dba3935af9878bf983eac0a2dc80e98bebb66c4c8fa7307e1a169c89cbd9a562bd21ec9e26f9638fde8fe06f9d26363bc60e136d80f3316f2711cb5212dc64d00eec58ae5a67238a8165aa18ef05b922739ebef3c0a03f2174e12f1e5b877e2b3ea57eaa50fac89b683e17597d839c03725cf0ce8e7fe822b4fecbd499bdc3c709491a59074e286a2266ad55d18ca31211d70ff188232d6d7f9718c4766cfa4a6d8532c0f2894cc37397e497730be7b800811d75dbc43386ae0a7156ae91155fb93db3281baee1c497fd82332a4729e12a36a5f21f2a8e5bece6237796a1d9673faf44b2e55c4670fba839099d0df3d1bc37c4f637538e49f3866727a6dff7a9545264d3a6bd7f7e0ce913a5752cfa04a2f954f3899e56baa6da64fa0005bb3a1d846afb909c39127255950467c98d8811b8949eff5ae0918cf082f1d450de6f3d0c15f5f8979bd95659630854a81d6de4ddfce1c0b131cf80a0bc7081a989629636a91a402c012e0838b4419b502eea64dd4f1909861146f986bbd044c7c7c03514c835bcdb619689a75ec3834441525c32592175568c8e2bed6991aa84c1eb7e7c6747900144298f0792892f4e39e5f639ed3c3f9ccba0028e4190b7350a66d9d072d744a30dbfc3bf5e5335e872726a4cc29344d50f117fa1221f029024a92fc68583b3de467f0a4c59d8c0714b32b29f8203148dcae61b8ab1034afc2f1939ef45b8fcd7a0750a7ff93cceba3bdb842287bd860b9f6f23b9fc9fd49ccdf42e25942256d8349b18d19a1d83ad5814f98bb20f508528b57536657d6494c4632160e3ba4e2e3ae3fde92075d5acc9374e60340b129acd73b995b3f324404df8107738f5694cabb5ba414298f16b357519038239c171aa1c45a4c2801b40b2eb0c517b76136d16f0d5daf658f67b038dcf49814928ee4a89a755fa719fe814503fb4e1b48899e00df3d506599663a6348a3c7027e8d023b80bbe26ed11ae79788a74e43d37083834de19e8be1353397dc3ca9f00562dc5c2bd8e94f811f8af7cbb84a5c9e16c4032772df6f4aba5a235813fb70da6e14cc6172311cf45babcb9b7e460758c60513e7eff22240f31b52f9a5764217c2f5e4f807cd6a7cde319f419374aa26c67d0366ca6ed27e6fd7df82bd417b34ce43321813c4831be5d1597c33e3d986c96f5235dae3f028a5765819be6571b0edc772e6a6410c754cd561e8ab333dac99218da5dcc3a28201e44f0f2656bc194bf06518f1f3b439eaca552f983ff13d6fa841d71daa92a4aa9c9c3a3a1ef7bd1f3fea2e158cccaa8d5ea419ae43e79e0c3c7a0e20b5d4f19bc55f92e3b96a166ba6960aeb046870220c63d6b3356b054eafe2cf1bf00c13d3f99de55da8eeec3484e31ba99e92d86da146f918bff5cdbb8c34f6a1c52173c524b0cae14a61a1f6efa6b1fe1bea0786c9121b1e887470fea0adbcda9ad401e7f9fb2f3a5219f12580053ccbf8fd95a1a988e000c2ea8c48aef210fdfcf0b903f568341dbcb8e777b784fd88fc5efb80aa7adbeb057cb9293643e6eda1509a20a8fc73746425126367d11ae0fb28affba719f70e09e53f3af5282ae63a0de8190a8da401170bae668013c935a6c0ec4ed1373158688c199c85a1e232a3cbff1f6c19fddac924f98ffb0f953d7580dbe0e0cea24875b3da90bd7fc8b01cda177720c39a1cef05113ae37803695ff818f67b566716631ffed117024a1f14837f33796df40ee6d1721fe0643d1b33f1c01f02aa52fd150a15bda38240bb0f2e0a88a68e3b812d4284a26426aa4658df10050a38ac090c82fb4007bee40253a55041fa01b5d21106f1832a31699f497beef98f72a27d8e258a84a8cde6cb47ea32d93975c58a00d85d58a4cadb0a3d7e1043fbc1108e6a5adfbb8aef07cce8370955b4028ec75bdfeacdf597b617faa5ac45ec447ac98bccfb27774fb10d033c1bcb4ea0bf6d4011a8351fed2fe840b6ec29b85c2128bb4dd21b69f6ee38081530c42e53e472c3ad4a6cde9db5b6b5bfb1c068e85dd1b44fee68e220da793dae365248fa8d17ba2691a213941609bc9226ecd9197edd4a9b9e42c88954d70be20a0d457a7ccdc28c5bff4630043dd34e7e499898f623f014412a61c781e7add8ac5cbb4ce461f4c21955a7c1a7cd77b9bb593cb02c8f78cb5eb12c6247601b4a7ae564ad1c557312ee91d612a9e86ad3d76ca5c0c4fb4d2645a165f94d599b5d5fd88764d04b5c6a6a1f67c477856e1057e420228e758fce93e99d9b7c902bb13334f4b6b25ae01c51bf523cdd13b6ffcdd267cf11173bdcce8b7ba27250fc0c8da6411b7eccd38cf27b2ca40bba0aa8edb5542eb18257dc6a572720db1ce909bae181fc69edd1a2c599a0677fea9703a5eb4f0a4ef9ef8cd680a0b58b67075fe05abcec6cb206d6b35649fd11d591dd99dd6c3ff886fcf95186da4e8a5017a4bb217a8d1a95e8e9021e5691cefb97f830db3476c2e549ec18d1913862a809d25dea538673bf48f9943c29f6f4f76889c98d2b6d855a15df62d6c56071c4a79f30ec2cc6cd1b848a0632392fcba7583440e64bcbb37f6571f405941031be7bea1740ca99dfabdcbf463605a314815b5b7c5282da61e55562280da1a88f86b37898fe726ba3bbc80470f80047d1c57f4bb64d7da0cfbeedeb5c697e464f30c90731c7e42da1321e3d5ff8ccd531bbccdaf60d18e388fcf26e01ab39137f53a44d82173b19b8b25aa5350f11f23b088af95db6a2a27ac438a15e4078a8346821a05959edddd19ac9ca4acc1866cd761cb395cc9f27a5e88ef1fe2a960b0a2501bda8d88e2bad48a8a52e6173fa26cb16f3de637d9ba5d5d3bb046c0544d9d710c8cc6f3f28e99692944"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "7bb92c6c2a168380f3752766d047032959edc1287a8754f80b781867aeb7a3e56de8c09f5aba417a722dcdebb9e06d79952318660c88975fbc1714a35a85e14fcfa23afe9b0bdcfc01de9a7fd978ab259f7a8279f673c66b77eb7cfdf4975f7306ed1d5ae9efb2c7716c59d5a57a7fd1fea311aea89f642d1cc7d327c182eba149073d798a91"}, @INET_DIAG_REQ_BYTECODE={0x62, 0x1, "20a3edd191cb37d71f93ed5676c8d696fb098ed73fc31b249b98f3870fe9ec29a8e9266b9ce3e526d54fd6ad09a60b08d55cbfb57ef72c118fee51d679855b66e9ab7b9729a59d6e81df48965716d2adea1c514ddef72fd073fadf51502f"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "e06cfe208aa5a021e57cd57a21932988802daabb238c6e9bd5d17ed4111340091e93b18eca36e353d506a70da9a1e14b5875917f2610ced23b77da3ebcfb907fa63ffc8d8276743b255fbc05295c1857d923ce61538051546784a51aa67ac297c9ef6da3067ab0c12696"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "738aea57f3e1bdaa7181f25148228360c7c1a644219b7a0c06"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "b309a308351a2836c148cc3fd986262e731457023f53d361007b9a0c2c394c7dbcaff2f281503875"}]}, 0x12c8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000001480)={0x1, @io_capability_reply={{0x42b, 0x9}, {@any, 0x4b, 0x0, 0xe2}}}, 0xd) write$bt_hci(r1, &(0x7f0000000080)={0x7, @accept_logical_link={{0x439, 0x21}, {0xc9, {0x5, 0x8, 0x6, 0xfffffff9, 0x5, 0x1}, {0x5, 0x7f, 0x9, 0x80000000, 0x1, 0x401}}}}, 0x25) 16:39:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x2, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:00 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 12) 16:39:00 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x4, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:39:00 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="071c040300007a"], 0x7) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0x800, 0x6, "7391cacacea3411605784f5ed00457c4"}}}, 0x20) 16:39:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:00 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 13) 16:39:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x27, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0xfffffdef) 16:39:00 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x2}}}, 0x1d) 16:39:00 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) 16:39:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:39:01 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) (fail_nth: 14) 16:39:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0xfffffffffffffdef) [ 2998.405078] FAULT_INJECTION: forcing a failure. [ 2998.405078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2998.407242] CPU: 1 UID: 0 PID: 21819 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251031 #1 PREEMPT(voluntary) [ 2998.407277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2998.407291] Call Trace: [ 2998.407300] [ 2998.407309] dump_stack_lvl+0xfa/0x120 [ 2998.407349] should_fail_ex+0x4d7/0x5e0 [ 2998.407383] _copy_to_user+0x32/0xd0 [ 2998.407416] simple_read_from_buffer+0xe0/0x180 [ 2998.407475] proc_fail_nth_read+0x18a/0x240 [ 2998.407516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2998.407552] ? security_file_permission+0x22/0x90 [ 2998.407590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2998.407625] vfs_read+0x1eb/0xc70 [ 2998.407663] ? __pfx_vfs_read+0x10/0x10 [ 2998.407695] ? lock_release+0xc8/0x290 [ 2998.407738] ? __fget_files+0x20d/0x3b0 [ 2998.407793] ksys_read+0x121/0x240 [ 2998.407822] ? __pfx_ksys_read+0x10/0x10 [ 2998.407865] do_syscall_64+0xbf/0x390 [ 2998.407905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2998.407929] RIP: 0033:0x7f32a7ea969c [ 2998.407948] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2998.407972] RSP: 002b:00007f32a546c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2998.407996] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f32a7ea969c [ 2998.408013] RDX: 000000000000000f RSI: 00007f32a546c1e0 RDI: 0000000000000003 [ 2998.408027] RBP: 00007f32a546c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2998.408042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2998.408057] R13: 00007ffc655df78f R14: 00007f32a546c300 R15: 0000000000022000 [ 2998.408094] [ 2999.492597] Bluetooth: hci1: command 0x0401 tx timeout [ 3001.540635] Bluetooth: hci1: command 0x0401 tx timeout [ 3003.588600] Bluetooth: hci1: command 0x0401 tx timeout [ 3005.636553] Bluetooth: hci1: command 0x0401 tx timeout [ 3007.684551] Bluetooth: hci1: command 0x0401 tx timeout 16:39:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0xb, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x2, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x2, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x4}}}, 0x1d) 16:39:10 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000026c0), 0x4000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000003ac0)={0x20, "edd6b1"}, 0x6) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/237, 0xed}, {&(0x7f0000001340)=""/222, 0xde}, {&(0x7f0000001440)=""/236, 0xec}], 0x7, &(0x7f00000015c0)=""/29, 0x1d}, 0x80000001}, {{&(0x7f0000001600)=@l2, 0x80, &(0x7f0000001980)=[{&(0x7f0000001680)=""/103, 0x67}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4, 0x4}, {&(0x7f0000001740)=""/221, 0xdd}, {&(0x7f0000001840)=""/38, 0x26}, {&(0x7f0000001880)=""/58, 0x3a}, {&(0x7f00000018c0)=""/44, 0x2c}, {&(0x7f0000001900)=""/126, 0x7e}], 0x8, &(0x7f0000001a00)=""/156, 0x9c}}], 0x2, 0x40000000, 0x0) 16:39:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0xfc}}}, 0x7) readv(r0, &(0x7f0000002580)=[{&(0x7f0000000080)=""/155, 0x9b}, {&(0x7f0000000140)=""/239, 0xef}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/136, 0x88}, {&(0x7f0000002300)=""/179, 0xb3}, {&(0x7f00000023c0)=""/149, 0x95}, {&(0x7f0000002480)=""/6, 0x6}, {&(0x7f00000024c0)=""/161, 0xa1}], 0x9) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002640), 0x400, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000002680)={0x7, [0x40, 0x7], 0x4}, 0x10) 16:39:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9}}}, 0x7) 16:39:10 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:39:10 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x1) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000180)=0x8b, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x1, 0x1) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x48c101, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="011c1403000000"], 0x178) 16:39:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x4, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:10 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84502) 16:39:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x5, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:11 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x4, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x5}}}, 0x1d) 16:39:11 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84503) [ 3009.732620] Bluetooth: hci1: command 0x0401 tx timeout [ 3011.780846] Bluetooth: hci1: command 0x0401 tx timeout [ 3013.828762] Bluetooth: hci1: command 0x0401 tx timeout [ 3015.876601] Bluetooth: hci1: command 0x0401 tx timeout [ 3017.924623] Bluetooth: hci1: command 0x0401 tx timeout 16:39:21 executing program 7: getrandom(&(0x7f0000000080)=""/254, 0xfe, 0x2) getrandom(&(0x7f0000000180)=""/200, 0xc8, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:39:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) 16:39:21 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84504) 16:39:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x6}}}, 0x1d) 16:39:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x6, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x60, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:21 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x5, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)="763602c7987a1d0b56116a16dd70d176a91d783db3595ca31203f08a7623fe80d1aa82bf3fae7428338e222d405ef70f6e2bda27cc4c7f5e5e00dfb196208c1d706aa8c25fb255609f54b58993da5ab8b5334745f542ce1f007279d2a6dc4491bf4913bd2d6917dbcb1de0c6e47b676bc5fec458843c7033e9b4439d1168c841d72a9d5812be6058793c89876df7a982885bfb0e042c62e0dcf25929061c188661a921e921505725186b") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) write$bt_hci(r2, &(0x7f0000000180)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x3, 0x2, "b1f246", "476589", 0x40, 0x0, 0x80, @none, 0x5, 0x4a, 0x1f, 0x9, 0x80, 0x81, 0x80}}}, 0x1d) write$bt_hci(r0, &(0x7f00000001c0)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:39:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x26, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x8}}}, 0x1d) 16:39:21 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x6, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:21 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84505) 16:39:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0xf0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:39:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x1c}}}, 0x1d) 16:39:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000080)="1c78be180bdac0612c39aacbb476dacd624ba5151d32e74fecda755f7903763282732af6c592e8b2fc1d16ec0a9f011938f7b8136aaf4506c094a170973ecb6921f15eac9d64a4634b9ca187c6751f4ad3c891c65fc3707d1a30e2dcc9390ff78e0171cb73401eed526fcf413573f71763edd5d61e1d86a0f2042824a2c0eaca5b449fd52ddde5452a69c6d33be256d50906bcbf54") write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:39:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = pidfd_getfd(r1, r1, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="011c040300000012ab0af2ac5ebb80819556e280d87930153223bedea18e5cdbeca0739e3b4f481dc2d89e252e8697c649d165307e39c02260b97292caa276968d7afa020797e512fefab465de8aeb97f2f08aabd5dadf8bc8e50da2cc788eeb79af78f442"], 0x7) [ 3019.972675] Bluetooth: hci1: command 0x0401 tx timeout [ 3020.612709] Bluetooth: hci4: command 0x0401 tx timeout [ 3022.020661] Bluetooth: hci1: command 0x0401 tx timeout [ 3022.661830] Bluetooth: hci4: command 0x0401 tx timeout [ 3024.068650] Bluetooth: hci1: command 0x0401 tx timeout [ 3026.116629] Bluetooth: hci1: command 0x0401 tx timeout 16:39:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) write$bt_hci(r0, &(0x7f0000000100)={0x1, @disconnect={{0x406, 0x3}, {0xc8, 0x51}}}, 0x7) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 16:39:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x500}}}, 0x1d) 16:39:29 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84506) 16:39:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x8, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140), 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/97, 0x61}], 0x1, &(0x7f0000000280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}, 0x40) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0xffffffffffffffff, r3, r4}, 0xc) 16:39:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 16:39:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x289, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:29 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84507) 16:39:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) r2 = socket$netlink(0x10, 0x3, 0x19) fcntl$dupfd(r1, 0x406, r2) 16:39:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="017ca50073d7b4"], 0x7) 16:39:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x1c, 0x0, 0x0, 0x0, @none}}}, 0x1d) [ 3028.164575] Bluetooth: hci1: command 0x0401 tx timeout [ 3030.212609] Bluetooth: hci1: command 0x0401 tx timeout [ 3032.260700] Bluetooth: hci1: command 0x0401 tx timeout [ 3034.308829] Bluetooth: hci1: command 0x0401 tx timeout 16:39:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$binfmt_elf32(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xf8, 0x5, 0x2, 0x4e5, 0x3, 0x3e, 0x0, 0x19, 0x38, 0x368, 0x2, 0x401, 0x20, 0x36c, 0x6, 0x4d}, [{0x1, 0x7fff, 0x200, 0xffffff72, 0x400, 0x0, 0x1, 0x9}], "9fb314198b1364f2a8973ccf7315b8aa6866d5eaf126baae37c1ebe150b8a123801a5eee8f5398c197482063d1971a4a5b4063358c295c3a840a173c773958c1cfa550082c686ab67dcc2c8dd6d04341476d123eabd2c68fa2c62ed7d065498b4d7a5a5b8c378b5e701978b38ca6684c7d92", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5ca) write$bt_hci(r1, &(0x7f0000000280)={0x1, @accept_phy_link={{0x436, 0x100}, {0xc9, 0x4, 0xc4, "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"}}}, 0x104) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:39:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x801, 0x2}, 0xfffffffffffffedd) write$bt_hci(r0, &(0x7f0000000080)={0x7, @delete_stored_link_key={{0xc12, 0x7}, {@any, 0x7}}}, 0xb) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x4}, 0x6) r3 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x600000, 0x185, 0x2}, 0x18) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000100)=0xcd, 0x4) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0xc000001b, &(0x7f0000000200)="3d38849627e0023254962ae4ec69d6c349bb807a14d3c3b6c6799e5f86ad589ed0b962f8e7e5970306f3a616cfc47d019823b55d0fb5233359a5a36033b96d3b5849a899a5425fe7628c8313ec385443f2c7668366a823f5e1302cdb26d25185805cde56ca0bfe2e340edd8c4b428f961b91bdb861016b767008dc66b6c45df3a2987ec6060db798225a9ee14d33d1b0baddcedc49aa822815e377b7efdeb2907a0534ccad8afb60ee934b7d8c158cfff7") 16:39:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x500, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x600}}}, 0x1d) 16:39:39 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84509) 16:39:39 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:39:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x2, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:39 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x8451c) 16:39:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) [ 3036.356562] Bluetooth: hci1: command 0x0401 tx timeout 16:39:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x4, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x600, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x543, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:39 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@any, 0x80}}}, 0xb) 16:39:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000100)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x81, 0x3f, 0x60, 0xa4, "daef5bbd22475ad442be3ca236f24a85fdca439dc72f94fd5939cda4fb5e5a"}}}, 0x27) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:39:39 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84563) 16:39:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc8}}}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:39:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x1c00}}}, 0x1d) 16:39:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x5, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:39 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_remove_cig={{0x2065, 0x1}, {0x81}}}, 0x5) 16:39:39 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x86500) 16:39:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x5dc, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) recvmmsg(r1, &(0x7f0000001200)=[{{&(0x7f00000000c0)=@caif=@dgm, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/2, 0x2}, {&(0x7f0000000140)=""/101, 0x65}], 0x2, &(0x7f0000000200)=""/4096, 0x1000}, 0x5}], 0x1, 0x22, 0x0) 16:39:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x3, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) [ 3038.404656] Bluetooth: hci1: command 0x0401 tx timeout [ 3040.452610] Bluetooth: hci1: command 0x0401 tx timeout [ 3042.500655] Bluetooth: hci1: command 0x0401 tx timeout [ 3044.548619] Bluetooth: hci1: command 0x0401 tx timeout [ 3046.596682] Bluetooth: hci1: command 0x0401 tx timeout 16:39:50 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x1c00, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="bbbbbfb213a2419e2a5f9e012d25cda291e2d456f539c8e9ee25d1467e2858b29bde420a72358e87350490d7fad99d1d302b1cad2875bcb2093bd6f94a5494bbe5", 0x41}], 0x1, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x777fdbf6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x48}}], 0x1, 0x4004020) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:39:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x5e0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x6, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x1, 0x1) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x5, 0x0, 0x20000000}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) fadvise64(r1, 0x7, 0xd23d, 0x0) 16:39:50 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01f4c7de1c040320878c879297242470a98fe33b2616f07626883f9200eb1bbffe11b4f532ebdc62d01d994a7e0ddbcf4f261ed75ca879d051aa8e1fb12d66de747e0d461a1d57a7fb5667b58065dba27c4b2f1c01839713ee636f6a607ef1b91d753346549ccd6c19422fb70e42bab3b9e25d9ba44c997368df82f888a5889ebfe97a3ee5a85cb339e6baf009c353bc98a00d249f2223e14cadf92a8bf91839bba476a8e67b9a7440efbbe8ad98805788a4de62685da730c5570f701819baea98d98c9eebad09a91f1557c4a9394f7eaa3c1f0f8fa15417e52c357610b702ae5edf7e4f58ae2b"], 0x7) 16:39:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="011c0003203b4d7de6e5e24aa03fe18acc6094cfea09ddc2c085ec7fbed18f29205b22f3565e3bfdd61facb26997e01255f242b006786b564d434e67b4e6bc735211095e"], 0x178) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000080)="1de6bfb81c") 16:39:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x2}}}, 0x1d) [ 3048.644610] Bluetooth: hci1: command 0x0401 tx timeout [ 3050.692534] Bluetooth: hci1: command 0x0401 tx timeout [ 3052.740580] Bluetooth: hci1: command 0x0401 tx timeout [ 3054.788596] Bluetooth: hci1: command 0x0401 tx timeout 16:39:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0400000020000080000066696c653000"]) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0xfffffffffffffff8, 0x4, 0x8001}) 16:39:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x26, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:39:58 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:39:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x608, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:39:58 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x9, 0x1, {0x1, 0x2, 0x10000, 0x2, 0x4}, 0x80}) 16:39:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1043209e1fb51cb198a62600000931251184151595ff490fed3108fb209c6f09b095cf3fa46b40a0706423f306a85732b018c6927656cca9ffec153c10ffd02d81e30b518714658e9e4d90aa69a599102f9a379a47ffffffffd5c1cc38e7349c36b8d779d928da5e848013bb4edb824a8f0000002000000060c4ead60013c64bbbf2897dfc7b8c1f0cacc9ed69c7eb1510a13c7e385737c0444853dd2f327a1799cc505fe59348e72980b77f307d9bde419630f7ede169e241c8d9f047cd86f79df7e3eb99e3c59fa6d613e5ec4fe7a400af5700a0c473860722bcf3d57736b58ed87a5bc41f255ceb79c650fa"], 0x73) r2 = dup(r0) write$bt_hci(r2, &(0x7f0000000080)={0x1, @write_eir={{0xc52, 0xf1}, {0x20, "559543aec573c17795844a737012b2bba84bbd34eb5dabd419d1b9a639847357f6c5eb649f505e0b3c132240f162c3a42c9b454022c97fe409efeddd30af9e02319de15290d3b3f467b6298dd6978e25f90c61a4156af534b3b356bcc1b1941d6fd77bc23bf73566a5798eece091cd0bb6ba0551b747341a30dcf2c6dc5bd9935c61f749a78c858b609c61a4943327c9e38b235adc404313c346d1ac2ff7a9121194fdf741653c9a6e57d33f7839e9bc4b14b0cff9f5e08e992625bee378cd14e32f9109eacd9ccc96a988b7a1fcfff28e785c86b2537e1873982a31eb40ccc0a8795bcc9ed0fec1adc98892c55286d4"}}}, 0xf5) recvmmsg(r1, &(0x7f0000003b80)=[{{&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/112, 0x70}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000680)=""/60, 0x3c}, {&(0x7f00000006c0)=""/120, 0x78}], 0x7, &(0x7f00000007c0)=""/106, 0x6a}, 0x4}, {{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000000c40)=[{&(0x7f00000008c0)=""/41, 0x29}, {&(0x7f0000000900)=""/219, 0xdb}, {&(0x7f0000000a00)=""/59, 0x3b}, {&(0x7f0000000a40)=""/145, 0x91}, {&(0x7f0000000b00)=""/167, 0xa7}, {&(0x7f0000000bc0)=""/96, 0x60}], 0x6, &(0x7f0000000cc0)=""/56, 0x38}, 0x7}, {{&(0x7f0000000d00)=@hci, 0x80, &(0x7f0000001140)=[{&(0x7f0000000d80)=""/212, 0xd4}, {&(0x7f0000000e80)=""/206, 0xce}, {&(0x7f0000000f80)=""/118, 0x76}, {&(0x7f0000001000)=""/252, 0xfc}, {&(0x7f0000001100)=""/11, 0xb}], 0x5, &(0x7f00000011c0)=""/77, 0x4d}}, {{&(0x7f0000001240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/89, 0x59}], 0x1}, 0xd5}, {{&(0x7f0000001380)=@isdn, 0x80, &(0x7f0000001680)=[{&(0x7f0000001400)=""/37, 0x25}, {&(0x7f0000001440)=""/114, 0x72}, {&(0x7f00000014c0)=""/2, 0x2}, {&(0x7f0000001500)=""/166, 0xa6}, {&(0x7f00000015c0)=""/157, 0x9d}], 0x5, &(0x7f0000001700)=""/4096, 0x1000}, 0xa5}, {{&(0x7f0000002700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/36, 0x24}, {&(0x7f00000037c0)=""/120, 0x78}, {&(0x7f0000003840)=""/91, 0x5b}, {&(0x7f00000038c0)=""/10, 0xa}, {&(0x7f0000003900)=""/95, 0x5f}, {&(0x7f0000003980)=""/155, 0x9b}], 0x7, &(0x7f0000003ac0)=""/134, 0x86}, 0x100}], 0x6, 0x0, &(0x7f0000003d00)={0x0, 0x989680}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000003d40)) 16:39:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x4}}}, 0x1d) 16:39:58 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x2, 0x0, 0x0, @none}}}, 0x1d) 16:39:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x689, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:39:58 executing program 5: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x1, 0x2, 0x1, 0xe, 0x7, 0x2}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f00000000c0)="06a932025a659f5cb7be516865cdd3d37fab004ce7fc164f570a0b55df09c9baa677ee96cd6b0c4c176ce9825e8142a51f51a04eb25a32d3bef859178b875f1a85c428a4d7c72398107a4123be4f1c6232024f4e975f4ebae1700ad08dc431897d6509a9496fd4cf459040fe95466ec2c9e360952fae051c8eea78c719bd44be3494170a871a243adcee737e796d1d979fc822cb5ff1d98773e40429a0aa3d3b781adb15a6dd05c0ff302d0b04256b736b0fa5f7") setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x30, 0x0, 0x1, 0x7, 0x0, 0x7d2}, 0x20) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011c0403590000"], 0x178) 16:39:59 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080), &(0x7f0000000040), 0x2, 0x0) fsetxattr$security_selinux(r2, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000400)={r1, r0, "f57de382532478a9f333de8a4c216b9bb8000f034976b35447288cf18ccfcf2d8682569a89390f3acc24f03dd35c30c05e220c0add9ebfed6937a11b7f447079e6592b50f853d6149b9cc2cb65d246afb96ca3b9c2f9d2672b020000006be6174cd387f3ca9bd7f332c3dcda9c1ef86b10b46d075abe42ba0a36bcd6fc9e65084671d740d1574bac2285b8cd03410275e4ed3e3f97104765b2498b526622c89bb0dceede796afea4d407da44db8dcee596ce390757fd2cbdd9beb797ab2a7b6815f216c4ec039440c86b568dca54308184ff3edde855f56d554f8dc56f95d4eb04ac588d40f4a1edf6e6b52e00000000000500", "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"}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:39:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x4, 0x0, 0x0, @none}}}, 0x1d) [ 3056.836546] Bluetooth: hci1: command 0x0401 tx timeout [ 3058.884607] Bluetooth: hci1: command 0x0401 tx timeout [ 3060.932590] Bluetooth: hci1: command 0x0401 tx timeout [ 3062.980594] Bluetooth: hci1: command 0x0401 tx timeout [ 3065.028616] Bluetooth: hci1: command 0x0401 tx timeout [ 3067.076586] Bluetooth: hci1: command 0x0401 tx timeout 16:40:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:40:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0x7f}}}, 0x7) 16:40:10 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @switch_role={{0x80b, 0x7}, {@any, 0x20}}}, 0xb) 16:40:10 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x189100) 16:40:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x5}}}, 0x1d) 16:40:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/80, 0x50}, {&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/106, 0x6a}], 0x6, &(0x7f0000000480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x12000) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:40:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x5, 0x0, 0x0, @none}}}, 0x1d) 16:40:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x806, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:40:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x6, 0x0, 0x0, @none}}}, 0x1d) 16:40:10 executing program 2: sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000009040)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000009000)={&(0x7f0000008a40)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {0xb, 0x0, 0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xffffffe1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffd}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x40014) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000091c0)={0x1f, 0x2, 0x2}, 0x6) r1 = open_tree(0xffffffffffffff9c, &(0x7f000000bd80)='./file0\x00', 0x89000) bind$bt_hci(r1, &(0x7f000000bdc0)={0x1f, 0x3, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) write$bt_hci(r0, &(0x7f000000bd40)=ANY=[@ANYBLOB], 0xb) lseek(r2, 0x7, 0x1) recvmmsg(r2, &(0x7f000000bac0)=[{{&(0x7f0000009240)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000009100)=[{&(0x7f00000092c0)=""/86, 0x56}], 0x1, &(0x7f0000009340)=""/36, 0x24}, 0x5}, {{&(0x7f0000009380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000009480)=[{&(0x7f0000009400)=""/23, 0x17}, {&(0x7f0000009440)=""/29, 0x1d}], 0x2, &(0x7f00000094c0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000009780)=[{&(0x7f00000095c0)=""/83, 0x53}, {&(0x7f0000009640)=""/192, 0xc0}, {&(0x7f0000009700)=""/71, 0x47}], 0x3, &(0x7f00000097c0)=""/129, 0x81}}, {{&(0x7f0000009880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000009cc0)=[{&(0x7f0000009900)=""/26, 0x1a}, {&(0x7f0000009940)=""/32, 0x20}, {&(0x7f0000009980)=""/144, 0x90}, {&(0x7f0000009a40)=""/149, 0x95}, {&(0x7f0000009b00)=""/221, 0xdd}, {&(0x7f0000009c00)=""/147, 0x93}], 0x6, &(0x7f0000009d40)=""/210, 0xd2}, 0xff}, {{0x0, 0x0, &(0x7f000000a080)=[{&(0x7f0000009e40)=""/201, 0xc9}, {&(0x7f0000009f40)=""/27, 0x1b}, {&(0x7f0000009f80)=""/93, 0x5d}, {&(0x7f000000a000)=""/86, 0x56}], 0x4}, 0x1}, {{0x0, 0x0, &(0x7f000000a6c0)=[{&(0x7f000000a0c0)=""/155, 0x9b}, {&(0x7f000000a180)=""/190, 0xbe}, {&(0x7f000000a240)=""/121, 0x79}, {&(0x7f000000a2c0)=""/127, 0x7f}, {&(0x7f000000a340)=""/85, 0x55}, {&(0x7f000000a3c0)=""/243, 0xf3}, {&(0x7f000000a4c0)=""/182, 0xb6}, {&(0x7f000000a580)=""/100, 0x64}, {&(0x7f000000a600)=""/149, 0x95}], 0x9, &(0x7f000000a780)=""/181, 0xb5}, 0x6}, {{0x0, 0x0, &(0x7f000000aa40)=[{&(0x7f000000a840)=""/176, 0xb0}, {&(0x7f000000a900)=""/92, 0x5c}, {&(0x7f000000a980)=""/191, 0xbf}], 0x3, &(0x7f000000aa80)=""/140, 0x8c}, 0x2}, {{&(0x7f000000ab40)=@qipcrtr, 0x80, &(0x7f000000b2c0)=[{&(0x7f000000abc0)=""/122, 0x7a}, {&(0x7f000000ac40)=""/226, 0xe2}, {&(0x7f000000ad40)=""/142, 0x8e}, {&(0x7f000000ae00)=""/150, 0x96}, {&(0x7f000000aec0)=""/123, 0x7b}, {&(0x7f000000af40)=""/167, 0xa7}, {&(0x7f000000b000)=""/214, 0xd6}, {&(0x7f000000b100)=""/115, 0x73}, {&(0x7f000000b180)=""/215, 0xd7}, {&(0x7f000000b280)=""/10, 0xa}], 0xa}, 0x3}, {{&(0x7f000000b380)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f000000b680)=[{&(0x7f000000b400)=""/191, 0xbf}, {&(0x7f000000b4c0)=""/217, 0xd9}, {&(0x7f000000b5c0)=""/157, 0x9d}], 0x3, &(0x7f000000b6c0)=""/15, 0xf}, 0x10001}, {{&(0x7f000000b700)=@ethernet={0x0, @dev}, 0x80, &(0x7f000000ba00)=[{&(0x7f000000b780)=""/139, 0x8b}, {&(0x7f000000b840)=""/106, 0x6a}, {&(0x7f000000b8c0)=""/124, 0x7c}, {&(0x7f000000b940)=""/31, 0x1f}, {&(0x7f000000b980)=""/117, 0x75}], 0x5, &(0x7f000000ba80)=""/58, 0x3a}, 0xfffeffff}], 0xa, 0x1, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r3 = open_tree(0xffffffffffffffff, &(0x7f0000009080)='./file0\x00', 0x1000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000009180)={&(0x7f00000090c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000009140)={&(0x7f0000009200)=ANY=[@ANYBLOB="2cf3801390ceacd670bb000004", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25790000000c009900040000003a0000000400f4000400f4000400f400"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040841) write$bt_hci(r0, &(0x7f000000bd40)={0x1, @role_discovery={{0x809, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) recvmmsg(r0, &(0x7f0000008e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f00000001c0)=""/113, 0x71}], 0x2, &(0x7f0000000280)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000001280)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/176, 0xb0}], 0x1, &(0x7f0000001400)=""/62, 0x3e}, 0x80}, {{&(0x7f0000001440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/172, 0xac}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/96, 0x60}, {&(0x7f0000002600)=""/35, 0x23}, {&(0x7f0000002640)=""/30, 0x1e}], 0x5, &(0x7f0000002700)=""/161, 0xa1}, 0x4}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)}, {&(0x7f0000003800)=""/16, 0x10}, {&(0x7f0000003840)=""/84, 0x54}, {&(0x7f00000038c0)=""/38, 0x26}, {&(0x7f0000003900)=""/178, 0xb2}, {&(0x7f00000039c0)=""/118, 0x76}, {&(0x7f0000003a40)=""/159, 0x9f}, {&(0x7f0000003b00)=""/135, 0x87}, {&(0x7f0000003bc0)=""/90, 0x5a}], 0xa, &(0x7f0000003d00)=""/132, 0x84}, 0x8}, {{&(0x7f0000003dc0)=@isdn, 0x80, &(0x7f0000005f40)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/69, 0x45}, {&(0x7f0000004ec0)=""/10, 0xa}, {&(0x7f0000004f00)=""/4096, 0x1000}, {&(0x7f0000005f00)=""/59, 0x3b}], 0x5, &(0x7f0000005fc0)=""/40, 0x28}, 0x4}, {{&(0x7f0000006000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006340)=[{&(0x7f0000006080)=""/77, 0x4d}, {&(0x7f0000006100)=""/214, 0xd6}, {&(0x7f0000006200)=""/117, 0x75}, {&(0x7f0000006280)=""/48, 0x30}, {&(0x7f00000062c0)=""/35, 0x23}, {&(0x7f0000006300)=""/14, 0xe}], 0x6, &(0x7f00000063c0)=""/115, 0x73}, 0x6}, {{&(0x7f0000006440)=@x25, 0x80, &(0x7f00000089c0)=[{&(0x7f00000064c0)=""/70, 0x46}, {&(0x7f0000006540)=""/137, 0x89}, {&(0x7f0000006600)=""/209, 0xd1}, {&(0x7f0000006700)=""/208, 0xd0}, {&(0x7f0000006800)=""/4096, 0x1000}, {&(0x7f0000007800)=""/221, 0xdd}, {&(0x7f0000007900)=""/4096, 0x1000}, {&(0x7f0000008900)=""/134, 0x86}], 0x8, &(0x7f0000008a40)}, 0xd7e2}, {{&(0x7f0000008a80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000008d80)=[{&(0x7f0000008b00)=""/210, 0xd2}, {&(0x7f0000008c00)=""/139, 0x8b}, {&(0x7f0000008cc0)=""/55, 0x37}, {&(0x7f0000008d00)=""/70, 0x46}], 0x4, &(0x7f0000008dc0)=""/5, 0x5}, 0x9}], 0x8, 0x100, 0x0) 16:40:10 executing program 7: ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xfffffff7}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) fsetxattr$security_selinux(r4, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) close_range(r4, r0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x400, 0x70bd24, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x100}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x23}}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x6c}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x200408c1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="013116a9a61db5"], 0x7) 16:40:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="015c0000009a156f0500e6c2edcb3a923ebbaa83741b692c23ef5c17a985f5e48cda1f6192bdbea61fe1492bd7e808dd5fbf55f1cebf6ff786944277e174e9e9f554a1b5cd04f09ac824af5ca384ad503ff85a3541f5bb605645ab69207df8c577f2325ccef82087558a412c86c75eb95d000000000bc302cdf540a9edb6086069eab8129f86a53f4c4027e2d2d4992820cba567fab72db4dd148c46fd8dea13f4d69962090a9bf1ff82afdc622ec4dd700ddd33584f91f8faf5f43fa75c51be43e66e22d2124a26be1c"], 0x178) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) recvmmsg(r2, &(0x7f0000001cc0)=[{{&(0x7f0000000040)=@hci, 0x80, &(0x7f0000001400)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/142, 0x8e}, {&(0x7f0000001200)=""/217, 0xd9}, {&(0x7f0000001300)=""/13, 0xd}, {&(0x7f0000001340)=""/137, 0x89}], 0x5, &(0x7f0000001480)=""/18, 0x12}, 0x5}, {{&(0x7f00000014c0)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001540)=""/198, 0xc6}, {&(0x7f0000001640)=""/83, 0x53}], 0x2}, 0x20}, {{&(0x7f0000001700)=@x25, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001780)=""/74, 0x4a}, {&(0x7f0000001800)=""/115, 0x73}, {&(0x7f0000001880)=""/99, 0x63}, {&(0x7f0000001900)=""/246, 0xf6}, {&(0x7f0000001a00)=""/157, 0x9d}, {&(0x7f0000001ac0)=""/73, 0x49}], 0x6, &(0x7f0000001bc0)=""/243, 0xf3}, 0x200}], 0x3, 0x40000002, &(0x7f0000001d80)) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) 16:40:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x2, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:40:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x8, 0x0, 0x0, @none}}}, 0x1d) 16:40:10 executing program 1: r0 = memfd_secret(0x80000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2a4081) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000000)={{0x40, 0x7}, {0x0, 0x6}, 0x80000001, 0x0, 0x9}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) write$P9_RWRITE(r0, &(0x7f0000000340)={0xb, 0x77, 0x1, 0x101}, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) fsetxattr$security_selinux(r2, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{}, {0x7}, {0x3f, 0x6}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0x5}, {0xa5, 0x2}, {0x40, 0x4}, {0x7, 0x6}, {0x2f, 0x2}, {0x4, 0x1}, {0x0, 0x7}], "02f2948f61783517"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x20, 0x2}, {0x2, 0x5}, {0x64}, {0x1f, 0x6}, {0x0, 0x2}, {0x1f, 0x5}, {0x7, 0x2}, {0x3f, 0x2}, {0x20, 0x1}, {0x7, 0x3}, {0x2, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0x4}, {0x5}, {0x6, 0x7}, {0x7, 0x1}, {0x81, 0x6}, {0x2}, {0x6d, 0x1}], "fa428e6db1e38eb0"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x9, 0x1}, {0x6c, 0x2}, {0x1, 0x4}, {0x8, 0x2}, {0x20, 0x7}, {0x7, 0x1}, {0x6, 0x1}, {0x8, 0x2}, {0x3, 0x6}, {0x2, 0x2}, {0x5, 0x6}, {0x81, 0x7}, {0x80, 0x7}, {0x80}, {0x5, 0x1}, {0x81}, {0x2d, 0x7}, {0x3, 0x2}], "c70c6aec50d95016"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x80, 0x3}, {0xb4, 0x7}, {0x1f, 0x5}, {0x6, 0x1}, {0x40, 0x3}, {0x80, 0x2}, {0xff}, {0x5}, {0x81, 0x4}, {0x2, 0x6}, {0x4e}, {0x7, 0x1}, {0xe0, 0x7}], "d67d9bc3f151723c"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xff, 0x4}, {0x2, 0x1}, {0x1, 0x1}, {0xee, 0x1}, {0x0, 0x7}, {0x4, 0x2}, {0x8, 0x6}, {0x95, 0x3}, {0x3, 0x3}, {0x40, 0x5}, {0x1, 0x5}, {0x6a, 0x3}, {0x3f, 0x2}, {0x4, 0x3}, {0x40, 0x2}, {0x2}, {0xe0, 0x6}], "1f43dc09ac7a71ff"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x40, 0x3}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x3}, {0x2, 0x7}, {0x7, 0x3}, {0x1, 0xc7}, {0xe7, 0x7}, {0xc3, 0x6}, {0x5, 0x7}, {0x71, 0x2}], "d9de3b8b90bc58e0"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x44}, 0x10) sendfile(r2, r3, 0x0, 0x8ef) 16:40:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x6}}}, 0x1d) 16:40:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0xb00, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:40:10 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="116ef7a4da5354011c0403000000"], 0x7) [ 3069.124702] Bluetooth: hci1: command 0x0401 tx timeout [ 3071.173526] Bluetooth: hci1: command 0x0401 tx timeout [ 3073.220664] Bluetooth: hci1: command 0x0401 tx timeout [ 3075.268660] Bluetooth: hci1: command 0x0401 tx timeout [ 3077.316649] Bluetooth: hci1: command 0x0401 tx timeout 16:40:20 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x1c, 0x0, 0x0, @none}}}, 0x1d) 16:40:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x8}}}, 0x1d) 16:40:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @remote_oob_data_reply={{0x430, 0x26}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "c6cea8d54e067e67be88d5d35285ca73", "316f33498975000088d716cc2f79b5a4"}}}, 0x2a) 16:40:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x4002, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x5d, 0x4) 16:40:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x4, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:40:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0xe00, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:40:20 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x4, 0x0, @time={0xff, 0x3}, {0x1f, 0x9}, {0x3, 0x4}, @addr={0x5, 0x3}}, {0x3f, 0xb4, 0x7, 0xf7, @time={0x1}, {0x9}, {0x0, 0xff}, @time=@time={0xfff, 0x608}}, {0x1f, 0x0, 0x80, 0x4, @time={0x8001}, {0xa9, 0x1}, {0x3, 0x20}, @control={0x5, 0x4137, 0x2}}], 0x54) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x22100) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) fsetxattr$security_selinux(r0, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x8505}], 0x1, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000140)={[0x80]}, 0x8) 16:40:20 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="829c4b27e61404042d0d9a398b290e065e9bc93134ef"], 0x7) 16:40:21 executing program 5: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0xff, 0x6}]}, 0xc, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x178) r1 = inotify_init() ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="bb8c39830116"], 0x6) 16:40:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x2f89, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:40:21 executing program 1: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x218100) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/176, 0xb0}, {&(0x7f0000000140)=""/116, 0x74}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40010022) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x2, 0x18, 0x0, 'queue1\x00', 0x8}) 16:40:21 executing program 5: listxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=""/4096, 0x1000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81100) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @change_conn_ptype={{0x40f, 0x4}, {0xc9, 0x3}}}, 0x8) recvmmsg(r1, &(0x7f000000ac40)=[{{&(0x7f0000001180)=@phonet, 0x80, &(0x7f0000001340)=[{&(0x7f0000001200)=""/65, 0x41}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/14, 0xe}, {&(0x7f0000001300)=""/15, 0xf}], 0x4, &(0x7f0000001380)=""/3, 0x3}, 0x5}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000013c0)=""/162, 0xa2}, {&(0x7f0000001480)=""/24, 0x18}, {&(0x7f00000014c0)=""/34, 0x22}, {&(0x7f0000001500)=""/204, 0xcc}], 0x4}, 0x7ff}, {{&(0x7f0000001640)=@l2tp, 0x80, &(0x7f0000001840)=[{&(0x7f00000016c0)=""/114, 0x72}, {&(0x7f0000001740)=""/213, 0xd5}], 0x2, &(0x7f0000001880)=""/121, 0x79}, 0xffff}, {{&(0x7f0000001900)=@caif=@rfm, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001980)=""/24, 0x18}, {&(0x7f00000019c0)=""/236, 0xec}, {&(0x7f0000001ac0)=""/125, 0x7d}, {&(0x7f0000001b40)=""/194, 0xc2}, {&(0x7f0000001c40)=""/26, 0x1a}], 0x5, &(0x7f0000001d00)=""/55, 0x37}, 0x40}, {{&(0x7f0000001d40)=@isdn, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001dc0)=""/253, 0xfd}, {&(0x7f0000001ec0)=""/169, 0xa9}, {&(0x7f0000001f80)=""/172, 0xac}, {&(0x7f0000002040)=""/81, 0x51}], 0x4, &(0x7f0000002100)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000003100)=@nl, 0x80, &(0x7f0000003180), 0x0, &(0x7f00000031c0)=""/40, 0x28}, 0x200}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/185, 0xb9}, {&(0x7f00000042c0)=""/34, 0x22}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/28, 0x1c}, {&(0x7f0000006340)=""/150, 0x96}], 0x7, &(0x7f0000006480)=""/211, 0xd3}, 0x7}, {{&(0x7f0000006580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000007980)=[{&(0x7f0000006600)=""/94, 0x5e}, {&(0x7f0000006680)=""/197, 0xc5}, {&(0x7f0000006780)=""/175, 0xaf}, {&(0x7f0000006840)=""/107, 0x6b}, {&(0x7f00000068c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/165, 0xa5}], 0x6}, 0xfeee}, {{&(0x7f0000007a00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000009bc0)=[{&(0x7f0000007a80)=""/4096, 0x1000}, {&(0x7f0000008a80)=""/41, 0x29}, {&(0x7f0000008ac0)=""/4096, 0x1000}, {&(0x7f0000009ac0)=""/11, 0xb}, {&(0x7f0000009b00)=""/192, 0xc0}], 0x5, &(0x7f0000009c40)=""/4096, 0x1000}, 0x7f}], 0x9, 0x10162, &(0x7f000000ae80)={0x0, 0x3938700}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:40:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x7) 16:40:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x1c}}}, 0x1d) 16:40:21 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x500, 0x0, 0x0, @none}}}, 0x1d) 16:40:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x5, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:40:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) close(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller1\x00'}) 16:40:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r2) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r3) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r4) [ 3079.364552] Bluetooth: hci1: command 0x0401 tx timeout [ 3081.412571] Bluetooth: hci1: command 0x0401 tx timeout [ 3083.460595] Bluetooth: hci1: command 0x0401 tx timeout [ 3085.508586] Bluetooth: hci1: command 0x0401 tx timeout 16:40:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:40:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x6, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:40:30 executing program 1: r0 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2, r0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) r2 = dup2(r1, r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000100)={0x2, 'veth1_to_hsr\x00', {0x1f}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000040)={{0x5, 0x7f}, 'port0\x00', 0x20, 0x10000, 0x7, 0x9, 0x0, 0xc2, 0x1, 0x0, 0x1, 0x2}) 16:40:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) close_range(r0, r0, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x4, 0x1}, 0x6) 16:40:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x3580, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:40:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x500}}}, 0x1d) 16:40:30 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x600, 0x0, 0x0, @none}}}, 0x1d) 16:40:30 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x2, 0x5, "a2970c", 0x4, 0x80}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8fe50403000000"], 0x7) [ 3087.557633] Bluetooth: hci1: command 0x0401 tx timeout 16:40:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16:40:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000004880)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000140)=""/126, 0x7e}], 0x2, &(0x7f0000000200)=""/56, 0x38}, 0xffffffff}, {{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/70, 0x46}], 0x1, &(0x7f0000000380)=""/51, 0x33}, 0x2}, {{&(0x7f00000003c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)}, {&(0x7f0000000480)=""/51, 0x33}, {&(0x7f00000004c0)=""/103, 0x67}], 0x3}, 0x1000}, {{&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000600)=""/132, 0x84}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000740)=""/136, 0x88}, {&(0x7f0000000800)=""/160, 0xa0}, {&(0x7f00000008c0)=""/203, 0xcb}, {&(0x7f00000009c0)=""/125, 0x7d}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x7, &(0x7f0000001ac0)=""/74, 0x4a}}, {{&(0x7f0000001b40)=@ax25={{0x3, @default}, [@bcast, @default, @netrom, @null, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001bc0)=""/144, 0x90}, {&(0x7f0000001c80)=""/117, 0x75}, {&(0x7f0000001d00)=""/104, 0x68}, {&(0x7f0000001d80)=""/67, 0x43}, {&(0x7f0000001e00)=""/219, 0xdb}], 0x5, &(0x7f0000001f80)=""/179, 0xb3}, 0x7}, {{&(0x7f0000002040)=@hci, 0x80, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/155, 0x9b}], 0x1, &(0x7f00000021c0)=""/95, 0x5f}, 0x3f}, {{&(0x7f0000002240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000022c0), 0x0, &(0x7f0000002300)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003300)=@tipc=@name, 0x80, &(0x7f0000004800)=[{&(0x7f0000003380)=""/86, 0x56}, {&(0x7f0000003400)=""/99, 0x63}, {&(0x7f0000003480)=""/240, 0xf0}, {&(0x7f0000003580)=""/190, 0xbe}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/207, 0xcf}, {&(0x7f0000004740)=""/4, 0x4}, {&(0x7f0000004780)=""/114, 0x72}], 0x8}, 0x8001}], 0x8, 0x10000, 0x0) 16:40:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x26, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:40:30 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x1c00, 0x0, 0x0, @none}}}, 0x1d) 16:40:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x4305, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:40:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x600}}}, 0x1d) 16:40:30 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x1, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)=']-\xdd/{#\x00', &(0x7f00000000c0)='./file0\x00', r1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x1, 0x1) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000180)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) fsetxattr$security_selinux(r4, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) dup(r4) ioctl(r0, 0x100, &(0x7f0000000100)) 16:40:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) [ 3088.428289] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 3088.429961] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 3089.604630] Bluetooth: hci2: command 0x0406 tx timeout [ 3089.605583] Bluetooth: hci1: command 0x0401 tx timeout [ 3091.652671] Bluetooth: hci1: command 0x0401 tx timeout [ 3091.652721] Bluetooth: hci2: command 0x0406 tx timeout [ 3093.700632] Bluetooth: hci1: command 0x0401 tx timeout [ 3095.748537] Bluetooth: hci1: command 0x0401 tx timeout [ 3097.796571] Bluetooth: hci1: command 0x0401 tx timeout 16:40:40 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0000018, &(0x7f0000000080)="e59b975ed2d02fa39c3e7b4e6c85a15e4ea64238c7e0b233b2f12e77f01e0afb20cf2b4574ddc9879051eccaae15d25edc") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:40:40 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:40:40 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x700, 0x10, 0x2, 0x800, {{0x20, 0x4, 0x2, 0x1f, 0x80, 0x68, 0x0, 0x4, 0x29, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x2a, 0x1, [{0x4, 0xb, "b33b41ccaae531cca6"}, {0x5, 0x2}, {0x0, 0xd, "e6b405739cfc16167e3453"}, {0x5, 0xa, "9a65c67db96e4fab"}]}, @generic={0x82, 0x5, "ec0e87"}, @lsrr={0x83, 0x13, 0xf2, [@broadcast, @dev={0xac, 0x14, 0x14, 0x33}, @remote, @dev={0xac, 0x14, 0x14, 0x2d}]}, @rr={0x7, 0xf, 0xe9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote]}, @noop, @noop, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x7, 0xd, "b9c2d5412ada4706b92660"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'tunl0\x00', r1, 0x20, 0x8, 0x1, 0xfffeffff, {{0x10, 0x4, 0x0, 0x20, 0x40, 0x65, 0x0, 0xc0, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x1f, 0xb0, [@private=0xa010100, @empty, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback]}, @end, @generic={0x88, 0xb, "495e2e5b5f6801697e"}]}}}}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:40:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x1c00}}}, 0x1d) 16:40:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x4788, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:40:40 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x323a00) 16:40:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x2, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:40:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) close_range(r1, r0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x28000, 0x97c1bd214cdf6fab) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x7ff, 0x0, 0x2, {0xa, 0x4e21, 0xf98, @local, 0x1}}}}, 0x8) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:40:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x4, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:40:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x4888, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:40:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x9, 0x3}}}, 0x8) 16:40:40 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x2, 0x0, @none}}}, 0x1d) 16:40:40 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x404140) 16:40:40 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) sendto(r0, &(0x7f0000000080)="b61c5ef374df199b225ac2c913a7c13351644cb072c578e7c97c25ac2e6a3e7bc8c1384d0dbcfbda512fdb9121951f7e5fae79ba383fee6583e8afbdb06ecbb329b2568d81a6dbd069", 0x49, 0x20000914, 0x0, 0x0) 16:40:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:40:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:40:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x5, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:40:40 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x4, 0x0, @none}}}, 0x1d) 16:40:40 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000003c0)={0x21, @tick=0x7ff, 0x2, {0x8, 0xd6}, 0x4, 0x2, 0x4}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x202000) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getpolicy={0x50, 0x15, 0xf74440a38e5b3653, 0x0, 0x0, {{@in, @in6=@private2}}}, 0x50}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x48001}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000040)={0x80, 0x5, 0x8, 0x6, 0x8, 0x5}) 16:40:41 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xc004801c}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1f4, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4001040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) r3 = dup3(r1, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0xffff}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1fc, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3d}, {0x6, 0x11, 0x401}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x7fff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xdfa}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xe0}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x47f}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x10}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000040) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000002380)="2725b05fbc3d2829c86fc2a8db90c51aa7746d6ee84d904d0caf5a889d68f60053ce64b5d217dc8c47bd1886d6fe87ac7be92dd1757632b32a38") pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x15) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) 16:40:41 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x1, 0x1) r2 = pidfd_getfd(r1, r0, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x7) [ 3099.844631] Bluetooth: hci1: command 0x0401 tx timeout [ 3100.420647] Bluetooth: hci4: command 0x0401 tx timeout [ 3101.892741] Bluetooth: hci1: command 0x0401 tx timeout [ 3102.468573] Bluetooth: hci4: command 0x0401 tx timeout [ 3103.940749] Bluetooth: hci1: command 0x0401 tx timeout [ 3105.988601] Bluetooth: hci1: command 0x0401 tx timeout [ 3108.036677] Bluetooth: hci1: command 0x0401 tx timeout 16:40:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) open_by_handle_at(r0, &(0x7f0000000080)=@ocfs2_parent={0x18, 0x2, {{0x6, 0xfffffffe, 0x6}, {0xffffffff, 0x0, 0x6}}}, 0x202000) 16:40:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x6, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:40:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20040040, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140500001200080025bd7000fddbdf250606e1354e0e4e220200000003000000faffffffb901000000000000000000000800000006000000", @ANYRES32=r2, @ANYBLOB="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"], 0x514}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:40:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011cff02000000"], 0x178) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) ioctl$sock_bt_hci(r1, 0xcd968, &(0x7f0000000080)="c2cb977e9c0285de") 16:40:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x2}}}, 0x1d) 16:40:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x5, 0x0, @none}}}, 0x1d) 16:40:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd4(r0, &(0x7f0000000040)={[0x7]}, 0x8, 0x800) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000100)="7cdf905078aa34c6c68d679e4ae1e588ed109225d4bb36b39119dc3b334cb7584d1116e58e89a101feec1c9f3b") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x7, @le_ext_create_conn={{0x2043, 0x55}, {0x9, 0xf9, 0x4, @none, 0xff, "68dd26cea2f5d37fa1419c5ec62df049fc868f1bc501b7424e16ce88fcd0e1fea689ddc91fa6a48cdb7cff5248e9c922432b86e0826ee0e6f651948ec3dcd04cce6727e317e8ace1f5ea1a"}}}, 0x59) r2 = fork() pidfd_open(r2, 0x0) 16:40:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x5865, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:40:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x26, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:40:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x6, 0x0, @none}}}, 0x1d) 16:40:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) memfd_secret(0x80000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x1, 0x4}, 0x6) 16:40:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x4, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:40:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x6000, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:40:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000002f80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/37, 0x25}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2, &(0x7f0000000140)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000001140)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001280)=[{&(0x7f00000011c0)=""/141, 0x8d}], 0x1}, 0x4}, {{&(0x7f00000012c0)=@phonet, 0x80, &(0x7f0000001480)=[{&(0x7f0000001340)=""/101, 0x65}, {&(0x7f00000013c0)=""/146, 0x92}], 0x2, &(0x7f00000014c0)=""/52, 0x34}, 0x90f0}, {{&(0x7f0000001500)=@xdp, 0x80, &(0x7f0000001680)=[{&(0x7f0000001580)=""/41, 0x29}, {&(0x7f00000015c0)=""/95, 0x5f}, {&(0x7f0000001640)=""/64, 0x40}], 0x3, &(0x7f00000016c0)=""/70, 0x46}}, {{&(0x7f0000001740)=@ax25={{0x3, @netrom}, [@default, @netrom, @bcast, @null, @rose, @rose, @netrom, @bcast]}, 0x80, &(0x7f0000001900)=[{&(0x7f00000017c0)=""/246, 0xf6}, {&(0x7f00000018c0)}], 0x2}, 0x80000001}, {{&(0x7f0000001940)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000019c0)=""/63, 0x3f}, {&(0x7f0000001a00)=""/244, 0xf4}, {&(0x7f0000001b00)=""/43, 0x2b}, {&(0x7f0000001b40)=""/209, 0xd1}, {&(0x7f0000001c40)=""/161, 0xa1}, {&(0x7f0000001d00)=""/69, 0x45}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x7}}], 0x6, 0x0, &(0x7f0000002fc0)={r1, r2+60000000}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="071c0403002000"], 0x7) 16:40:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x1c, 0x0, @none}}}, 0x1d) 16:40:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x7, 0x1, {0x3, 0x0, 0x1, 0x0, 0xab}, 0x1a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x9, 0xfffffffc, 0x1, 'queue0\x00', 0x4}) [ 3110.084609] Bluetooth: hci1: command 0x0401 tx timeout [ 3112.132614] Bluetooth: hci1: command 0x0401 tx timeout [ 3114.180653] Bluetooth: hci1: command 0x0401 tx timeout [ 3116.228605] Bluetooth: hci1: command 0x0401 tx timeout [ 3118.276678] Bluetooth: hci1: command 0x0401 tx timeout 16:41:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37602ce70"}}}, 0x27) 16:41:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0xffa8) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:41:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x4}}}, 0x1d) 16:41:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4}, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000640), &(0x7f00000006c0)=0x68) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, 0xfffffffffffffe5d, &(0x7f0000000480)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f00000001c0)=""/88, 0x67}, {&(0x7f0000000740)=""/174, 0xae}, {&(0x7f0000000300)=""/193, 0xc1}, {&(0x7f0000000400)=""/77, 0x4d}], 0x5, &(0x7f0000000500)=""/239, 0xef}, 0x101}], 0x1, 0x2100, 0x0) 16:41:02 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1f0000000001"], 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xb) recvmmsg(r0, &(0x7f0000006780)=[{{&(0x7f0000000b00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/192, 0xc0}], 0x1, &(0x7f0000000c80)=""/215, 0xd7}, 0x6}, {{&(0x7f0000000d80)=@isdn, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/204, 0xcc}], 0x2}, 0xc3}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000f80)=""/140, 0x8c}, {&(0x7f0000001040)=""/21, 0x15}, {&(0x7f0000001080)=""/110, 0x6e}, {&(0x7f0000001100)=""/50, 0x32}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/210, 0xd2}, {&(0x7f0000002240)=""/21, 0x15}, {&(0x7f0000002280)=""/126, 0x7e}], 0x8, &(0x7f0000002380)=""/196, 0xc4}, 0x6}, {{&(0x7f0000002480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002500)=""/36, 0x24}, {&(0x7f0000002540)=""/104, 0x68}, {&(0x7f00000025c0)=""/18, 0x12}], 0x3, &(0x7f0000002640)=""/254, 0xfe}, 0x400}, {{&(0x7f0000002740)=@hci, 0x80, &(0x7f0000002dc0)=[{&(0x7f00000027c0)=""/2, 0x2}, {&(0x7f0000002800)=""/72, 0x48}, {&(0x7f0000002880)=""/137, 0x89}, {&(0x7f0000002940)=""/65, 0x41}, {&(0x7f00000029c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/147, 0x93}, {&(0x7f0000002ac0)=""/150, 0x96}, {&(0x7f0000002b80)=""/254, 0xfe}, {&(0x7f0000002c80)=""/155, 0x9b}, {&(0x7f0000002d40)=""/74, 0x4a}], 0xa, &(0x7f0000002e80)=""/4096, 0x1000}, 0x400}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003e80)=""/245, 0xf5}], 0x1, &(0x7f0000003fc0)=""/72, 0x48}, 0x5}, {{&(0x7f0000004040)=@pppoe, 0x80, &(0x7f00000064c0)=[{&(0x7f00000040c0)=""/62, 0x3e}, {&(0x7f0000004100)=""/142, 0x8e}, {&(0x7f00000041c0)=""/196, 0xc4}, {&(0x7f00000042c0)=""/102, 0x66}, {&(0x7f0000004340)=""/190, 0xbe}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/4096, 0x1000}, {&(0x7f0000006400)=""/147, 0x93}], 0x8, &(0x7f0000006540)=""/156, 0x9c}, 0x10001}, {{&(0x7f0000006600)=@isdn, 0x80, &(0x7f0000006740)=[{&(0x7f0000006680)=""/144, 0x90}], 0x1}, 0x1f}], 0x8, 0x12000, &(0x7f0000006980)={0x0, 0x3938700}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000000c0)={0x0, 0x1000, @status={[0x5, 0x3ff, 0x4000000, 0x2, 0x1, 0x80000000]}, [0x5, 0x3f, 0x40, 0x23, 0x3, 0x1, 0xfff, 0x9, 0x0, 0x5, 0xfffffffffffff1bb, 0x4, 0x3, 0x1, 0x2, 0xb4e, 0xa528, 0x6, 0x7fff, 0x800, 0x1000, 0x7, 0x1, 0x4, 0x410f, 0xb36, 0x9, 0x200, 0x100000000, 0x1000, 0x2, 0x1, 0x200, 0xd85c, 0x400, 0x1, 0xde, 0x9, 0xa4, 0x2, 0xb, 0x1, 0xfffffffffffff433, 0x4, 0x9, 0x10000, 0x9, 0xa200, 0x5c553579, 0x1, 0x6, 0x2, 0x7, 0xffffffff, 0x8, 0x81, 0x7, 0xd0e, 0x8001, 0x2, 0x100000001, 0x80, 0xc, 0x3]}) 16:41:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x6488, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:41:02 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x5000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:41:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:41:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x7) 16:41:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x2, @none}}}, 0x1d) 16:41:02 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1) 16:41:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x6558, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:41:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37627ce70"}}}, 0x27) 16:41:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x7fff, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000008ec0)={{0x1, 0x1, 0x18, r1, {0x800, 0x400}}, './file0\x00'}) bind$bt_hci(r2, &(0x7f0000008f00)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 16:41:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x5}}}, 0x1d) 16:41:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x4, @none}}}, 0x1d) 16:41:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'ip6erspan0\x00', 0x7fff}) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) [ 3120.325626] Bluetooth: hci1: command 0x0401 tx timeout 16:41:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x3) 16:41:03 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x7, 0x6c}, 0x0, 0x5, 0x3ff, {0xff, 0x9}, 0x7f, 0x3ff}) 16:41:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x5, @none}}}, 0x1d) [ 3122.372674] Bluetooth: hci1: command 0x0401 tx timeout [ 3124.420666] Bluetooth: hci1: command 0x0401 tx timeout [ 3126.468591] Bluetooth: hci1: command 0x0401 tx timeout [ 3128.516602] Bluetooth: hci1: command 0x0401 tx timeout [ 3130.564620] Bluetooth: hci1: command 0x0401 tx timeout 16:41:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:41:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8035, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:41:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @create_conn_cancel={{0x408, 0x6}}}, 0xa) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:41:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x178) 16:41:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x6}}}, 0x1d) 16:41:13 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x6, @none}}}, 0x1d) 16:41:13 executing program 7: getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRESHEX, @ANYRES32=r0], 0x7) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x1f82}}}, 0x6) 16:41:13 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 16:41:13 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(r0, r0, &(0x7f0000000100)=0x8, 0x4) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:41:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:41:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x8}}}, 0x1d) 16:41:13 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) write$sndseq(r0, &(0x7f0000000000)=[{0x1, 0x4, 0x1f, 0x4, @time={0x3, 0xffff}, {0xbb, 0x74}, {0x3f, 0x1}, @result={0x80, 0x3}}], 0x1c) 16:41:13 executing program 2: fchdir(0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) [ 3132.612639] Bluetooth: hci1: command 0x0401 tx timeout [ 3134.660802] Bluetooth: hci1: command 0x0401 tx timeout [ 3136.709523] Bluetooth: hci1: command 0x0401 tx timeout [ 3138.756641] Bluetooth: hci1: command 0x0401 tx timeout 16:41:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x404) 16:41:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x158, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xa0, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x344f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1daf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x679}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x496d510f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3232109c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x516142f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60ac67b6}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51d58ffa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a0f77a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e069610}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc9}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1962}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50b7590c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a955062}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x167b63c2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b03edc}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65ed8d5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60413d58}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x512eb53b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6838}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x821c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a877a79}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d3, 0x0) lseek(r5, 0x7, 0x1) bind$bt_hci(r5, &(0x7f00000002c0)={0x1f, 0x3, 0x4}, 0x6) write$bt_hci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="011ced02000400bd2631288870fef92398384e34d54d6a707eeae95cdede65ddeaf757e78c926a87b07caf30d7de5630ca9aea3ab597ef68a09dea7c801e54d59a442819e8ec5fc60e1dc13d74f11b6d4f1b3ef0a185d337b9443afc59f072850b561d37107d9904a9b857956f89b52b6c15f8612db865022894cac1152dc597e67515a92d4400362d7ee4ac360ffeb5e36d6b39ca3b07e9fa484bff81cee9cfa44e45e022d123d1da6cb2136fe9abf6d3719250132d0b4746d1ee91d5ad4efc8523520f50e994321c"], 0x178) 16:41:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, &(0x7f0000000080)=@rc={0x1f, @none}, &(0x7f0000000100)=0x80) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:41:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x1c}}}, 0x1d) 16:41:23 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, @hci={0x1f, 0x0, 0x1}, @qipcrtr={0x2a, 0x4, 0x7ffd}, @isdn={0x22, 0xff, 0x2, 0x5, 0x6}, 0x101, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='syzkaller1\x00', 0x93cb, 0x4, 0x3}) 16:41:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8847, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:41:23 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$sndseq(r1, &(0x7f0000000040)=[{0x3f, 0x4, 0xb7, 0x4, @tick=0x5, {0x5, 0x2}, {0xff, 0x8}, @control={0x80, 0xfffffffa, 0x3}}, {0xf5, 0x0, 0x5, 0x3f, @time={0x3, 0x80000000}, {0x81, 0xb0}, {0x9, 0x1}, @note={0x4, 0x1, 0x13, 0x0, 0x1}}, {0xc3, 0x80, 0x3, 0x7f, @tick=0x20, {0x0, 0x7f}, {0x8, 0x7f}, @result={0x8, 0x7}}], 0x54) 16:41:23 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x1c, @none}}}, 0x1d) 16:41:23 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) [ 3140.804569] Bluetooth: hci1: command 0x0401 tx timeout [ 3142.852655] Bluetooth: hci1: command 0x0401 tx timeout [ 3144.900648] Bluetooth: hci1: command 0x0401 tx timeout [ 3146.948596] Bluetooth: hci1: command 0x0401 tx timeout [ 3148.996638] Bluetooth: hci1: command 0x0401 tx timeout 16:41:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000001480)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/225, 0xe1}, {&(0x7f0000001200)=""/90, 0x5a}, {&(0x7f0000001280)=""/171, 0xab}, {&(0x7f0000001340)=""/63, 0x3f}, {&(0x7f0000001380)=""/244, 0xf4}], 0x6}, 0x7}, {{&(0x7f0000001500)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001580)=""/206, 0xce}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/143, 0x8f}, {&(0x7f0000002740)=""/93, 0x5d}, {&(0x7f00000027c0)=""/143, 0x8f}, {&(0x7f0000002880)=""/21, 0x15}, {&(0x7f00000028c0)=""/46, 0x2e}, {&(0x7f0000002900)=""/28, 0x1c}, {&(0x7f0000002940)=""/137, 0x89}, {&(0x7f0000002a00)=""/197, 0xc5}], 0xa, &(0x7f0000002bc0)=""/239, 0xef}, 0x1}, {{&(0x7f0000002cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002d40)=""/215, 0xd7}, {&(0x7f0000002e40)=""/199, 0xc7}], 0x2, &(0x7f0000002f80)=""/90, 0x5a}, 0xa6}, {{&(0x7f0000003000)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003080)=""/160, 0xa0}, {&(0x7f0000003140)=""/163, 0xa3}], 0x2, &(0x7f0000003240)=""/142, 0x8e}, 0xfffffff8}, {{&(0x7f0000003300)=@caif=@dbg, 0x80, &(0x7f0000003780)=[{&(0x7f0000003380)=""/161, 0xa1}, {&(0x7f0000003440)=""/141, 0x8d}, {&(0x7f0000003500)=""/196, 0xc4}, {&(0x7f0000003600)=""/77, 0x4d}, {&(0x7f0000003680)=""/219, 0xdb}], 0x5}, 0x10001}], 0x5, 0x40, &(0x7f0000003940)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000003980)=ANY=[@ANYBLOB="011c84030000e9ed84798d8baa2cd92ce77dfd6d4a00"], 0x178) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 16:41:32 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x2}}}, 0x1d) 16:41:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8848, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:41:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x21000, 0x0) close_range(r1, r0, 0x2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0506b0e249afac19726f431820221e9245199ba0b3f889275367c61c64b25070bb67d9f838d7c78abd07fd823901934ae50cb14042c4a42452de187811fcd545244d355ff7165accef2a431b53ea2446878d6c6ca46a37e5e24f99dfc7b42805fbcaf5e8a3920d942d0751cadce9fb8cfd6ebd527226a5dbfd6b70929de3de0f3ace6162636669256fbf4f1a1a83994f4101000000b9a0fcea78902cd15e64e05efb9ec622f5a6e101073844d555deea55be47ee2c8c05b52113b4da59f12f56cd126fc08662a852afe000a15f244ec76e8d065a7916ccdde785770d72c5239837f95d16abad2105fa384be46fa1f5e8a98916"], 0x7) 16:41:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) lseek(r0, 0x7, 0x1) close_range(0xffffffffffffffff, r0, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x208dc3) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xa4000, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x10000, 0x80, 0x0, 'queue0\x00', 0x3}) 16:41:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0xfdef) 16:41:32 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001080)={0x1f, 0x4, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000080)={{r0}, 0x0, 0x4, @unused=[0x7fffffff, 0x9, 0x6, 0x6913], @devid}) 16:41:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x500}}}, 0x1d) 16:41:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0xfffffdef) 16:41:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @remote_oob_data_reply={{0x430, 0x26}, {@any, "0311e263930e7ff149d810d75ccf028a", "4629aa2a33fbbfb25255f96e38562e5d"}}}, 0x2a) 16:41:32 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x4}}}, 0x1d) 16:41:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x600}}}, 0x1d) 16:41:32 executing program 1: getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000040)=0x2c) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:41:32 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011c04990f0000"], 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) recvmmsg(r1, &(0x7f0000004600)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000180)=""/46, 0x2e}], 0x2, &(0x7f0000000200)=""/21, 0x15}, 0x10001}, {{&(0x7f0000000240)=@pppoe, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000440)=""/6, 0x6}, {&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/175, 0xaf}], 0x6, &(0x7f00000016c0)=""/74, 0x4a}, 0x17}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/140, 0x8c}], 0x1, &(0x7f0000001840)=""/103, 0x67}, 0xffff}, {{&(0x7f00000018c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001940)=""/111, 0x6f}, {&(0x7f00000019c0)=""/131, 0x83}, {&(0x7f0000001a80)=""/61, 0x3d}, {&(0x7f0000001ac0)=""/63, 0x3f}, {&(0x7f0000001b00)=""/127, 0x7f}, {&(0x7f0000001b80)=""/195, 0xc3}, {&(0x7f0000001c80)=""/24, 0x18}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x8}, 0x6}, {{&(0x7f0000002d40)=@qipcrtr, 0x80, &(0x7f0000004300)=[{&(0x7f0000002dc0)=""/212, 0xd4}, {&(0x7f0000002ec0)=""/101, 0x65}, {&(0x7f0000002f40)}, {&(0x7f0000002f80)=""/2, 0x2}, {&(0x7f0000002fc0)=""/227, 0xe3}, {&(0x7f00000030c0)=""/20, 0x14}, {&(0x7f0000003100)=""/148, 0x94}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/175, 0xaf}, {&(0x7f0000004280)=""/69, 0x45}], 0xa, &(0x7f00000043c0)}}, {{&(0x7f0000004400)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/121, 0x79}], 0x1, &(0x7f0000004540)=""/140, 0x8c}, 0x7}], 0x6, 0x40010160, &(0x7f0000004780)={0x0, 0x989680}) 16:41:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8864, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:41:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc8}}}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="071c0403d25e7b90ffbd2c89213bedb8fce5a0b6979cecd431af005bced3921316750c14ac5084eec864867376f747ac8971b2796fe9d1f603a07558f4dde7ce1121"], 0x7) [ 3151.044536] Bluetooth: hci1: command 0x0401 tx timeout [ 3153.092562] Bluetooth: hci1: command 0x0401 tx timeout [ 3155.140574] Bluetooth: hci1: command 0x0401 tx timeout [ 3157.188637] Bluetooth: hci1: command 0x0401 tx timeout [ 3159.236581] Bluetooth: hci1: command 0x0401 tx timeout 16:41:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x1c00}}}, 0x1d) 16:41:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x5}}}, 0x1d) 16:41:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0xfffffffffffffdef) 16:41:42 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x1, 0x1) write$sndseq(r0, &(0x7f0000000000)=[{0x8, 0x2, 0x5, 0x0, @time={0x5, 0xffffffff}, {0x8, 0x4}, {0xa1, 0x1}, @queue={0x77, {0x9, 0x9}}}], 0x1c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa00) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x3f, 0x4, 0x1, 'queue0\x00', 0x1}) 16:41:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8902, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:41:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000180)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x1, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) fsetxattr$security_selinux(r2, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) r4 = dup2(r3, r1) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000040)=0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xfea}}, './file0\x00'}) 16:41:42 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xfff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r1, 0x49, 0x80000}) ioctl$TCFLSH(r0, 0x540b, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="07df0403000000755ef9bae96ea2b02a599ea5c4fdb1d60a83e47df5170192dd9b3f7a6247a56a5ceda6120f0398aab4d1d17cb14fdcceec62826d88c4dbcc0000000000"], 0x7) 16:41:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000100)=ANY=[], 0x7) 16:41:42 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0xd4400) 16:41:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="135c041ca20000"], 0x7) 16:41:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:41:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x6}}}, 0x1d) 16:41:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0x0, 0x3f, 0x3e0, 0x3f}}}, 0xa) 16:41:42 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, r0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xea, 0x5, "84add82cdb33a34e27f56cedf5db909c4d24336ae844a0df1b4e5dd0ee3cf4d27cb74e3bc52aa0e9c6889821fa860c089eeb6994e29033fbdabc52c43406f84cdd307740f05972509ff08ff2b021dafcf0a1a8ef7016150018f59bae27689cce6eafccb0366f9bc625b19e4cf68e597555a2a352a3911315c82cb2175e2c19fd7ded9935790b569a3dfc016e3f5f53ee04c894f9663d35d219ade8b6f5a42fc0cc14d937c401a859817a01e4eadbd3b40c12f4b07da90d3aa397017bd45682f119a6595e3d36e6f6dd12d594640a57f926172b90e26c4bf59d4af58238ed909c42a6b77c6cff"}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x428080, 0x20, 0x5}, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth1_macvtap\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000637be1cf30e1b35f68bebe55e3ee"], 0x7) 16:41:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8906, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:41:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x7) 16:41:42 executing program 1: r0 = memfd_create(&(0x7f0000000200)='\x00\x04\x00\x02wyQ\xf0]Z\xf3,g\xe1\xbc\xff\xf5\xb0\x01\xcdq\x19\xfaX\xbbS\xde>\xc4\xda!\x02V\xbe\xe7p\xe0\x00\x00\x00\x00\x00\x00\x00\x93N!\xef[\x91\x97\xf6\xc1%\xe0\x05\x17` \xea\xbc@h\xa6\x97\xcd\x0e\xb8\xca\xde\xfb\xe18x\x00\x00\x18@s<\xb8\xf5\v\xe8]5D\xb4\x9f\xf62\xb7\x00n\xbc.\f\xa0M\x84u\xf3\xd6\xdd\x95\x9e\xf6\x89\xb6\x02\xa1N\xad\x99\xf3d\xd4\xacpWn\x81G\xd1_\xe1@\xfc\xaaH\xdf\xc3gU\xb1\xfd~\x97J<\x8d\x03\x90\xec\xc9\xe4\xbc\xe5\x95\'\xf0\x92\xa10\xfd\xe2\xcbj\xd81\xfeJ\xae\"\x8c^\xb9\x05\xbd\xf4\xfd\xd4P\x17\x9a\xb1\x93\x0fg\xedg\x9eA\xb8J;\xa9\x11\xfcR3\xa8\xc4\xc2\xd6fl\x95\xfe\xb6 U\xd5\t\xcb\x00nLs\x15p&\xdc\xe3\xcc\xa8-lc\x8f?,\x96K\xa7\xa3\xffq\xe5\x01\xf8\xb4\xbe\x13\xe3\xca^\v!\xde\xe3\xbb\xbf\xce\xacWS\xfe\xa4\xe7\xac\x894\xa6MQ\xac&\xf7?9\xfe\xccI\xf0\xb0\x9a\x8f\xba\xe3\xfe\x84\xf0\x10\xeb\xa7\x13\x02Nn\xde\xbb\xb5R(q%~\x8a\x0fWQ\x04\x19[X\x06O\x98\x1f\x89\xb8\xd3\xa2\xbaO\xb2\x90\xe4\xe2\xd8\x13\xa6\xb8\x8e)L\xe5}\xe4z\ao\xa3#\x93\x95.zT\x92(\"\xe5u\x93\xf8\xa28\xf3s\f-5\xbf\x87\x1d\xd5\xcb\xea+\xf9\x0fY-\x1f\xf4\x8d\xfd\xbf:\x10\xc8\xfa\x8e\x0f\xfe\xfdu@\xbe\xca\x16\x9f\"\xa3l.l\x1f\x01\x12\x98\x1dV\x88\x8b\xb2M#\x0f\xd7\xee\xa3\n\x0e\x06\x89\xd4\x1c\xf1k\xe6\xc7\x00\xf6\x1b\x9a\x83\x8e\xde\xd9\x00\x00\x00', 0x1) ftruncate(r0, 0x8800000) read(r0, 0x0, 0xfe5f) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x84501) 16:41:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfffffffffffff72b}}, './file0\x00'}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0xe) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:41:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x1c}}}, 0x1d) 16:41:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011c1903c90000"], 0x7) 16:41:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000100)={0x7, @le_ext_create_conn={{0x2043, 0xf4}, {0x1, 0x4e, 0x1, @none, 0x1, "f0fe2189e31d2180a446d0962246b913c575aefb97dcbb75bbfeae422510fe235f3fddeda777edb77c89dddea4b223fd68662b1b1a9964ff967a0bf89e79908bff2e585667a23fc498bb5c58b9cd4f01c3456645e1a36de42b9456b6956ac16d1bbb35f5af1e486ee38a191cbfe585eb72030a3e692557d2013ae61a4b9e78855220f6bd2edaac3e8306a6b0edfe8a483ce5a7549868740cbc11efacf12d3644ec425e227741fb05de6dcfdc4b48a181768587d54fe462e3d8214effd04a56b4ca81059d50507d0dd6944a00c60c7bcbb9670f67755bdfa3656bbf1bdb74881c513e23479fdf61379455"}}}, 0xf8) [ 3161.284535] Bluetooth: hci1: command 0x0401 tx timeout [ 3163.332661] Bluetooth: hci1: command 0x0401 tx timeout [ 3165.380609] Bluetooth: hci1: command 0x0401 tx timeout [ 3167.428637] Bluetooth: hci1: command 0x0401 tx timeout [ 3169.477573] Bluetooth: hci1: command 0x0401 tx timeout 16:41:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x1d) 16:41:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x7, @le_set_scan_param={{0x200b, 0x7}, {0x7, 0x4, 0x0, 0x22, 0xe3}}}, 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000140)="464b00bba44b4c5956eadc420d70593f186090176a63e1ca9a35645d8635da409dc34e65c5674fdaeaa7da20d5466085fa42b14b7b86c1f1503fdf36af276f7a9b119e3961ed883031b934e051c603c08caaf97ed1a52f11fc69b1d5b96444b49fed6271d9838286624fca7b62624683f332f9c5e2a8300acbe3f7e70674bc3350ad9545da1cf78afdb51b04f28d4ce5c8bc002103723c63356cc5399554c4800905ef69d49c97335fdbda44399d") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) write$bt_hci(r3, &(0x7f0000000100)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x5, "9e1beb500790dbe939de51d6407cff04d6ec6996b9cc1ad9ca6d21b83cd55e"}}}, 0x24) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2}, 0x6) 16:41:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="6e891af82c10672ee944fb5f9eb493e740898071db8f4ae2220aca3cf3e9ec8b3ffea1a263bb881c28986803b6565237f25b476eb6ec1c20cc816682e76cec535b2ee2bd29c19e6fa9326a1392db5ba41bd085ea4e83c45d5073fc2442a47a8d05f3997e5500b97d7f96a3bc077b369d0aa9ec35bf0aa90fc830f3c7ac111be04a593a7217c02619a28a09af2fb944ed0af33cdaa7da0ea1c71d7b39b675721fc6938782052313e2d78c77767d8a301b1132a2f314c187a9d7705123ee538c6fa5c5187f8d6c939134750a6667133842157237de7d68f26a58c3509ee29605489a9b5be4d0c4cd5b839cae7c2e", @ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x178) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="d4") 16:41:52 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/diskstats\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x74a5, &(0x7f0000001ec0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001f40), &(0x7f0000001f80)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd66}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x40020d4) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf51c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="0137202300000000c1716a796a67f35052a6102486f15e1fd37601ce700a5b8b43a3f3d7ec795e044d4bd51c9edf421b9bc8848b656d73108f257097af20c8258b75c8792a2b90be96ed13f0de04155cedaa6b937e2d767d0220bb8b8b73ac762263c0a4008c09f7576b7e3b1935f84798ae8961a039c3786fc052e4ff63861bd8ae8386317de8b38973fe1f984d1dd7c6f65fb3a26ae1fbbb1d582e73685c8954e2b168ed994b103ed10b826331b82a619b0454aeedd6df7f72ad7df86f0b4c81768719a324d5d62dd147ad436c6eb76e2ecd3107f051c9815facdca8"], 0x27) r6 = syz_open_pts(r3, 0x600003) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) fsetxattr$security_selinux(r7, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f00000004c0)={{r0}, "09e13e1b0076a4c3c343fccc43a0575a97ff5235ff040182004baefa61448319b7ec2d7aa7aed5532d660cc607629cf55862d54ec670ce186fde2f5f3c86eafb10eacb769eab73cf58b324050fb9a15bf72ea58bb4ee1ef38e0a8f2c55b815144ac7d49cf2c3cd0e3915ab556321c6d56cd646ec164666b1a68036d5575c3a88de6f41c0164188306b509d13c30f345dae0a5782643cc718a4b1d3b286e80a2408fa7f1502ad52530910c1541157758fc2fa609ba8239bdeb050d762fd9407e28ef9070e88453d2482d1a9eb5111fd87ad286a105bed5b706aadc7a5178108797746ee2b0e98e66cb046a24a1a9c9b49464f3b3417b29f26ad1839e6bc8306665b329fe4ed14f60fac88e551e5618385c18c5e04192a3f1169d7261a9ead5163ba7da9d3ae7b6e1842014e2e977ac45ec1d6e0c1be7f5e100f1f6a865e44872bd4614ed20f4f80e108edb1d6ff54d90b82b2adc948215f5d8cac7893cbfb88a5fcdf6df6775f18c56e10e984fb37f16d8c2ff2c8dfa31f568d4d5fce5d507fd898dcb55adfc26b57cfc9d47b17d0a8f5da5df4b79bfcec1274fd8b87960b3842b48c48217e81a03391038d3b269e8d66687efb85ca118bb83b5ab2f067dd8e7e6f2c3d0bd5df2b022cb9dae4352eb5f0d435500fe58067193fd7b259c1f2f05a46b54af37ed7f736389f3c32a4730f4d62f06ff25411beb72a0aa0386d2d4c15bf8775e4c8e4c6d80204bea36dd4eff6466454c481caa449f9c353e525bc3f0eb5a1792761c066231c142259aff2e95f7d9553e47105aeed615deb6980a15b3ca6d23dd806dd6df8e66b2f1c113f54464283d99168f878c4a7f1f512d63759e2ecc1cdae3fede523a18979bc3423551fa44e146cfa79e219101d0a4bc97f51a859baaa9977b5f74dbc99136630f945d83b6d2b7bcbaddada36ff29100202ccb8dfa5d492630fcb44c598039b4038672f715917fd109c742e3d2030e2f43bb2d82e3d1bee48971fc4cee6b016122db2fb55b61954523c91d182638f31406fb6936015f566516eb0d36addea7568f5509f659d38ae2f45ef9ce80b51c21aae981748e106719fa664c7c8eb5eb190e2bc0f0f20231d0864c37728da67bc3774b77df04d73dd0abfef271aa2aea4f62344ec3720b1d415bd31d1d0e4ba39dbb86c60a56cc0617c58725f3404a705051ceaa28be107548aa5041b102052eba017a6b079e267c6a55f08244d8c42da7459bc1a6e4bc5e7d87ffe4efac8a3176985860f9d4e22c3e86991251a5e4ba2c68dde127f3a7b6918d5c5066c262072aab8251a398a3f3acb4c8fe3c7e7d52865db0d4e6a8d6f1cb4c26d58f13e2cce96c8dd630fde4f8f5d2862e33f27a52b1ae5a93f082006fb9168edad112db40e6791064bd70a11f816bd93609b57dfa702e96491f154cd91633d8025d0f5658180a038042badbeb630d079819f75477760a81500964466d0822b5f9f227adbc68e1e612c3b4c2bf9fc3466ef3102be9ceaec658cb3405d595e71d82ffeccfb7097e67d8ba2811330ac0df469700c165eadea05ce51155e14723b109c69d43c14325231aa2a00c6cf39517d061fcfc3bfc08f0eec15cda6e99149a801e7a1716897b36772bce77326a73fa21b621d21530a52e404a5f03294c99656f28205c7cc4322ca85e5bc13814686ceac719b4331b1ffff679d131ba833431136d5bcfaab60bfbefa0f383baf0a99e60ee16afa60f2ece882b2234b4a083f4272004a736eab6b8e02f9b2b97db088b5aa472593e508ad6a42b80386dca6f198ca60c468e2a9cea14337c5e630a12f8146bed391a6bae7d0aa5e42abce53a4ffb6a2cf583bb31380433eb132af68a2ef2d85d391edf44119b7e355a07e368d06e953c034ff0ba180c5a2a8a7aec70f44420de8416465e885e328da3043759ca9dc75c2cf310d45024eb05786febbd703d888c886cdf7ef6140ca4d1ecf33fcc9a5e0868bfb34770dfe3988abb0a88070c2a49645688cdba09e936dbc89e3d81173ff1c57fc0b77b38a706652afec3bf58bf72a0acde82ec45566ec119e264ba2decdc487e34957af784905dac0073b685ec317976f051dd92c46d51f142e08e7e1d7858263e678fc86d0d4e633b39a655dd14bed39fc897e0d3d741bd253768e22d067973e9e2dc7a4ccf83d522935d560b135edcebeb71d0cd0a6e29bf20e877384eaa2276f984bdf89add208f7b5883fde47fb73215c53896444adc418554f015a3ae1f87ffb8cf1c1f44eb73bcaeea140336736e97033721a6f3a0aeb48341438726ac2059eecb091e7916013ee1d4852bc3930d923469992172709291a762553648f14eb591c9d8df6471b049aecfaa89f2276e79a03c03f97e1092281b06e8fa006dc4e0a674220a69d6997d842827f167b04e71146049fcf7bc4eafdd85f5f343e3d1f1ad8ee562dbc4befa451c2ae918447735843c446f0ee6b09b03d4fff35802e236c8f9514bafbc753d1244afef9d88db6ca7da1770368b0ca0a8ce7639818305bc60f64ca50f66259212200be1499483d9d9564b7e7a170963a6caa1dace14d8d7cb22d450c55ec34d91d69dd7e4b9414571afe03d4f7db483928888a52b6a6dfb05f4c3b1ec15d4dceff9726ee20e9a5ea3d45f448d1f4a9d4944f66a91611058ab36a37019fdb3a6d8ef3e8c91824a9d5484bf33cb5e40513a5c018abf8ec445a66844bc4c78fac1848fcf9e45283560510fff22e747da90a8340bbdd9f2e18685fa669e645a91867c3bd57d0046cc5d4ed8f1c51e9130540b4b7444f47894aea5ff65c26cd369beed66027e501362c805ba23c75fcf047b94a32483a8cb9bf80577d4cf1a197ec7a72e1e6459d0c0ac30b2203d144df9f6444246655f6e4046a55ee07c9b255ebc09583116e66005e201c7550dcee1dadfc00f0c445f7e3a0ec15df6a91a8a8acfe9930c2b41be66b67a9f902642084f51bbaf4ef5fe2310d10deead3ea08ab75ad97f9d4778bb3305dbd9cc157f115d3dbf0d0febd2cbe176c8e093d329bfa2a7f3446855377d4c8229784111a9c92e9c2e013dd8af087bcf5b5d1f8c645ad9a8e528407131e194997e3cbc9f889dfe5fc19a337daddd27ee3f7d2f340e6b04798acc4742313889e4bda7915a4f131f24c7bfb30c1930a0ab1857e76adb2fd02238907737e7f21ac9183f10e8430f650121429c4b6faec8f491ee9988491018a34b4f2d16bb07453c34196142efac3189ce80181ec22ec1771062cc9a13adbb8e2e6c43be25addf54a6ff5bd828d9d53c31ff4b750ab851b360f73a30d27dec1febeae81498d6a3be4b15ccf59fcb158e94e986543e23f53fafdbeb3fe2b73551a66b8edc8ec99fc8ab155ed3b9ad2b50295fa92eca8e7793fc188ecb7b94a36f6dcafe498066a5cacd145f1dea33135972951f266a105517a50dc916707d06b072cbe92291e05dfd6f3b8a6f0a18ee7c216ddd6bebafdcaa8e31fe98b55d6aee593409158c383bcbc28ec1ac4358f84dce7126d8a34181352b6127ab47f2b9f814064c548e63de053fd79bb2c92b811a8e3a1b26c6ac37b1316ceb6d514dc0f990f0d0e163a51f2a04811170d013a0b0e756fcf709ac8dcb269ab7d5ad8122adc5a40d28659e7c00400237eb3b5401b6c992b13826ca5c75541cb1c8ab8298b292447dab987d80676d94ce8a0fd6f970b3007e80d024deb9261fe4d71f0e92bcbcb34de0250ec035f1d008ff7decbd89a3fcd0ee4acf1035278b91ea09185924a86a768f8ed070896b51264dad5674736e6a1f5dc7ba757728b3bd799874f30cec7ec050e4d0c6cfa735241b1ebfdec25fc1b1e745a2c15bec1c6a2ae9b173c7ebbeb546271ea5b8744a576daa028b19eb692febe16daef4bc5661eb5bf5f0eb8226c66e45efd3baad7c72c164769ee80941deeb6d0a3329524f53f00d92c46632debb5d186b45a5fdedfc63fb5fad9283c46e7ece9b934ea723c51febd49d3b8d2e993e3f83813b62c7e4f6e8ccb5fa6d88a0265916399468377d030b0b764a5740da993a318364b464f504c81093c9f53e8fdd5a51621245f72d079a188a44bfe0273998155102d28762d4734098614cd4d2100ee675e098ce7a2cad296adbf5e7aaf68c1a13b7347363cac3de549b13f3ef7147e083e1809591f8cb8966605e567ea8346b68b08ce5b95d44be0397e672c30e84ea10769b827516c25411752deeae30b0e57b6c713af023c815019d1794ed7fc4aeb2a1d10305d3025d61e8e4e9b2a04287287c191b745c1e7f4f6380a15d307eaaf788b87682f34e7b2711a3e26460dbbb07a264dcbe6e18ec0ee5d4003a96fcf505c3e7ec86a1b1563df6c69cd9eab6fa5755dd68d01878d4225baca3f73c7fb0c8bc9c8a733cf9a2b4c9f0b9dd3e8a271b696bf3ea363e9c1604846277914561f2b4d19fd25642990a24bac61ff382698b66936777fd2b4ad9619bbce730d615d087ad8a6d1055a5fe6e154a0d47ae7af6c5e2c0a9a570bee0346ea71fc1b0e89f67d3f63c0f5d6c80e6df81af77fec847f1764f2f91dfc4fa2970cce75ecd03249ed061bcc85bd76ac05b2452f80d45100256a481f2f37fedb561fecce8ffc12a92f80324f94c2139b9f78e247c5035281e02f750b32986c0d052f4377a6ac80e513fd6850cd1117c3be250f23211356aaecdec81a1a31d3d86d355c9ba139d06f3becef7982f8ca3faa4895661a5a2ad8a0e3f5a30a44c70296fe678bb5865ff03bc4f443c0e69cfb48273024d2c536b76291f5be7b3988abe1bdf954a48bd507db8cff3f7d8f2f258d33fbf8ffc8b17f0a2de03cdb5e02b9df92944de9f25b8229a688753d1b876569024eb16c46751434f828145dd1ba06bf6b560565dd80f5efd6fd3a4b0f6f9377539305a03445d43dcd8fb041fe12676156f6ef9d950ea9de89356c9ba5a09ba0997f67f641e05f72643363018f448b7952d4451ee8325a8c0c0d13f2c6e5bd3ad1cf558f313885f166bdde8c790bc5dadd70f6c5ce416a8b394f01c3c9fe72f36c19c6be5d3788b36e923c9bad4a962aea55f771c21bc063142f353f5c4926b6571867a9f9f09882ebef2cfbd3129cb8f92092b0068448e8d14126c8e163565031296bb4280d2181f309b62ab5ddd5055dfb380e823dc23ecac029a52daaa3ea0704070f5505fb55a672e0cd3e7e8d6691dc6bc85024f0fdd297fc523e3e6f22ac303fbd8e68b958b6a70f038041422fa87616ad78d13fdcdc2cf8af881d5a115d3f3fa8d79416b52e7a60240d6fb7da9fcda85cc06092ee3af2f3d9d2a15e14c3562f16354c78df56090721483cb9566f0c8dc9544a5a37183539be617625e019274e2dcd54918697a6641fe1c92ba8acceea631928b5c45527b2b5558779bef4d4efe3494d59cf7d336cfe136b957ec1e10696f0a6258fce3b18fa125950496f1ad6ccc2c3402bab335f6d3e38a045a225a863bca22018b53a84ee0e6eb1149a40e696028765775edc73be35ef698594a8cf18340d211eea43d6c842789cfb15811c4c652c2aa007e4db5b790617d846a3a641dfc441e84420f5d9987d29d5fcf7f7c5f228c5d4f376a2401a41d46e8938e5c61c7fa47d4df968f59f7b896a60cc49dbe42f33d1d29aa7313834fe180bb1e4ca7ddf6fa3b46df7f05433fdebd698cd700d3f6abfce77cd52dc8b81f0a8103f2172b8751e67cb4723a8ada5bca52078d33e687f53602d930a79673591371f8d2cadc3446883d2f2748f74417f3cb16e1fa8ee6682540569b1c8bde9d0b5e4"}) write$binfmt_misc(r6, &(0x7f00000003c0)={'syz0', "f95980eb97d9091e420dec0dbdc1786d7ec50d77c903965fac194ec5ea76c3cde95598e03e03499db3789669dde2012662df43d378f7e089beaab16017525ae484d96b860f8b063eaff259c66bc5d322f04d68afad1647a2141339b1fb5739665cf922524d0b0cf3c0b433ac4a35399a8b4e0832d57d411afa5eda37f2aabb3f574adb2e830e015264e30e69b58f6639bf7d7c452be9c8392dee038afa6decbc9fc7132f1a5a785824b24a62f811dcc3029b6e3daf111eb94baa3605e392063471a289e386696f20e027258cb410524840be8f2a2a3e5ca7"}, 0xdc) 16:41:52 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xb0240) 16:41:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x892f, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:41:52 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:41:52 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x1b, "7a35f1", 0x4, 0x67}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @set_cpb={{0x441, 0xb}, {0xf1, 0x6, 0x20, 0x459, 0x81, 0xe1cc, 0x5}}}, 0xf) 16:41:52 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000080)={0x9, 0x0, 'client0\x00', 0x2, "41f07fde2a87d4c1", "601e592137352c982f2c43379fc969faf4bc2ceaa3d022d2e5c949ba6b0a224c", 0x2, 0x4}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0xff, 0x6}, {0x7f, 0xff}, 0x2, 0x5, 0xb3}) 16:41:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) 16:41:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x8, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) 16:41:52 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x2}}}, 0x1d) 16:41:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x1d) 16:41:52 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x4, 0x9, 0x1, 'queue1\x00', 0x81}) 16:41:52 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) recvmmsg(r0, &(0x7f00000042c0)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000100)=""/135, 0x87}, {&(0x7f00000001c0)=""/163, 0xa3}, {&(0x7f0000000280)=""/157, 0x9d}, {&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/158, 0x9e}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x7, &(0x7f0000002580)=""/91, 0x5b}, 0xab}, {{&(0x7f0000002600)=@qipcrtr, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002680)=""/129, 0x81}, {&(0x7f0000002740)=""/162, 0xa2}, {&(0x7f0000002800)=""/226, 0xe2}, {&(0x7f0000002900)=""/50, 0x32}, {&(0x7f0000002940)}, {&(0x7f0000002980)=""/216, 0xd8}], 0x6, &(0x7f0000002b00)=""/162, 0xa2}, 0x7486}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002bc0)=""/140, 0x8c}], 0x1, &(0x7f0000002cc0)=""/84, 0x54}, 0x4}, {{&(0x7f0000002d40)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002dc0)=""/169, 0xa9}, {&(0x7f0000002e80)=""/69, 0x45}, {&(0x7f0000002f00)=""/116, 0x74}, {&(0x7f0000002f80)=""/216, 0xd8}, {&(0x7f0000003080)=""/245, 0xf5}, {&(0x7f0000003180)=""/18, 0x12}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004240)=""/116, 0x74}}], 0x4, 0x22, &(0x7f00000043c0)={0x0, 0x3938700}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) [ 3171.524563] Bluetooth: hci1: command 0x0401 tx timeout [ 3173.572567] Bluetooth: hci1: command 0x0401 tx timeout [ 3175.620659] Bluetooth: hci1: command 0x0401 tx timeout [ 3177.668681] Bluetooth: hci1: command 0x0401 tx timeout [ 3179.716659] Bluetooth: hci1: command 0x0401 tx timeout 16:42:02 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:42:02 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000180)={0x1, @le_add_to_accept_list={{0x2011, 0x7}, {0x3d}}}, 0xb) r1 = memfd_secret(0x80000) accept4$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x1, 0x1) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 16:42:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x5}}}, 0x1d) 16:42:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0xdc05, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:42:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) lseek(r0, 0x1, 0x1) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:init_exec_t:s0\x00', 0x21) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:42:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x4}}}, 0x1d) 16:42:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000100)="f6e3943b0662d1dffe8855cd5539c2c94aa2e6bb029637aa3fb344d16651a19293e197ce46d65f0f77471b82becacf58ea84d51bbe84c0cd82f573d845b130c72d6dfa5486c34aec6bbe631e4cba158ca4706272a1dc303f6b55dcbff37ae38c2dd3077259d67b79ff086f9e8a38450e56436f7bd38fb36a7766b5e78a0ba8914add8f9629ce8dacfd2ec014129e209fed8804b31ce144278f78bc0931140bc661247a71b19d8c6021595a3681ccc517da0a9a75eaa4c4a6515d05c42fd91c46518fafca098c5716574f500343edb557") ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f00000000c0)="827da1757d3656efbda128a8734394d3bafc0d5ba183a45f7f1af24b9b2f1fde1a6117f7a8336c7937c91b5eabd24a29bbd357345befe3f0ddc25c7845") r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x8001, 0x80) close(r2) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:42:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @io_capability_reply={{0x42b, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x1}}}, 0xd) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:42:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x1d) 16:42:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0xe005, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:42:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x1, 0x2}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x7, 0x4) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1ffdf8ffff70"}}}, 0x27) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) 16:42:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0xf000, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:42:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x8}}}, 0x1d) 16:42:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @sniff_subrate={{0x811, 0x8}, {0xc9, 0x3ff, 0x400, 0x7}}}, 0xc) 16:42:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x5}}}, 0x1d) [ 3181.764646] Bluetooth: hci1: command 0x0401 tx timeout [ 3183.812618] Bluetooth: hci1: command 0x0401 tx timeout [ 3185.860583] Bluetooth: hci1: command 0x0401 tx timeout [ 3187.908609] Bluetooth: hci1: command 0x0401 tx timeout [ 3189.956655] Bluetooth: hci1: command 0x0401 tx timeout 16:42:14 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:42:14 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:42:14 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x6}}}, 0x1d) 16:42:14 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0xfdfc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:42:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x1c}}}, 0x1d) 16:42:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0xffff, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:42:14 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) r2 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x2}], {0x4, 0x3}, [{0x8, 0x2}, {0x8, 0x4, 0xee00}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x4, r2}, {0x8, 0x1, r3}, {0x8, 0x5, 0xee00}, {0x8, 0x0, 0xee00}, {0x8, 0x7, r4}], {0x10, 0x6}, {0x20, 0x4}}, 0x74, 0x1) syz_io_uring_setup(0x32bd, &(0x7f0000000080)={0x0, 0x580f, 0x20, 0x1, 0x26c, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) lseek(0xffffffffffffffff, 0x7, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4800) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) ioctl$FIOCLEX(r0, 0x5451) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x89cd, 0x430000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) clone3(&(0x7f0000000740)={0x2020000, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), {0x3e}, &(0x7f0000000480)=""/148, 0x94, &(0x7f0000000540)=""/203, &(0x7f00000006c0)=[r5], 0x1, {r6}}, 0x58) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000000)={0xfffffff7, 0x4, 0x66}) 16:42:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x4, 0xfffffffffffffffd}) write$bt_hci(r1, &(0x7f0000000100)={0x1, @reject_sync_conn_req={{0x42a, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}}}, 0xb) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x2, 0x4) 16:42:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_rssi={{0x1405, 0x2}, {0xc9}}}, 0x6) 16:42:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @role_discovery={{0x809, 0x2}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:42:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x500}}}, 0x1d) 16:42:14 executing program 7: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="011c0403400000"], 0x7) [ 3192.004597] Bluetooth: hci1: command 0x0401 tx timeout [ 3194.052539] Bluetooth: hci1: command 0x0401 tx timeout [ 3196.100564] Bluetooth: hci1: command 0x0401 tx timeout [ 3198.148534] Bluetooth: hci1: command 0x0401 tx timeout [ 3200.196552] Bluetooth: hci1: command 0x0401 tx timeout 16:42:23 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x84501) 16:42:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x600}}}, 0x1d) 16:42:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0132b332470000"], 0x178) 16:42:23 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x8}}}, 0x1d) 16:42:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x2, 0x0, 0x6, @dev}, 0x14) 16:42:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0137202300000000c1716a796a67f35452a6102486dd264d93aa2bfd80b42cf15eecd37601ce7090f756fda4aece73d1b7bf965700000000000000819a28ff84085fd7d7ac34d179bc52c74062cdcb944e4cfb26d8c3f3bedf5e9aac8836bf9e459969ff3114149e7f0b53ad4aa26bc1034b9082dcee676d45aa49"], 0x27) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000040)="bf7bdf512ad10b0419ce044f1680fa989f8a1920de294fe7a9c8a95b3a3372c425") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f00000000c0)="166e64f6e82cf415a66991fb56ce04ec58cc2441983845374d976f79b05cf67c8097490ba44d5e850916198dcf9fb6669d6f1c5216078de2f546176db2fd12f480068507d20325a74c241b5f22b122d85c9cd8d0cdcb3b180a5ce745bd8075d3e3bcb4ceee08b41d3e6810cd49654416df9ff781d0f108f68c492d42b9493f33a151") 16:42:23 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f00000001c0)="7e2373d6e1c157bd243ec9bf2f89c21afb75867f5b11b458652847d4d77ea4cb855262c7fd7365f9223977bd95674e5006d7dcebd3a4d307303a25dd228d0a04b8ef12fd61e58b8f9e310fc3f2bc19631e9f670b81f52d9922975a638c7ee3854b6ea9505d3015382b57f879e457d34227240b5d8f723a76d86e8d9383f812134e528fdc56ca91d0da4a3d1fbee6fe95333c9ec0") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x800, 0x81, 0x5c, 0x4, 0xb911, 0x9}}}, 0x12) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) readv(r1, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000001280)=""/201, 0xc9}, {&(0x7f0000001380)=""/252, 0xfc}, {&(0x7f0000001480)=""/70, 0x46}, {&(0x7f0000001500)=""/225, 0xe1}, {&(0x7f0000001600)=""/129, 0x81}], 0x7) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="61acb5ccab9e6675e038b51fb44dea7477143895b941e056082f6f6558c86fbf2d1aa5f3d72907851621327ff22e1f87dd6107e0c64c58d0ebd6498ff92b800999e871d3624ec9ac1000398185c8baec140e9174dcbefb6d038b1765e2d27e8eb1c835308c1691e66a296e80b9322627a932e3fe1de156d51551f99c9b6b422981ca1979b2"], 0xc) 16:42:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:42:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000, 0x4) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0137202300000000c1716a796a67988d6630102486dd264d93aa2bfd80b42cf15e1fd37601ce70d315bf3dd960b9f826d19942c7d4bfc325a7fbc4d6d1adce06dd37c657ca494f6fe1abf41650e983c8a802826e3dacdb0099c9e8d1592c0d5093be"], 0x27) 16:42:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:42:23 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x800400, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) 16:42:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'wg1\x00', 0x9}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:42:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x1c00}}}, 0x1d) [ 3202.244640] Bluetooth: hci1: command 0x0401 tx timeout [ 3204.292666] Bluetooth: hci1: command 0x0401 tx timeout [ 3206.340749] Bluetooth: hci1: command 0x0401 tx timeout [ 3208.388587] Bluetooth: hci1: command 0x0401 tx timeout [ 3210.436592] Bluetooth: hci1: command 0x0401 tx timeout 16:42:34 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x1c}}}, 0x1d) 16:42:34 executing program 7: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x40, 0x20, 0x6}, 0x18) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f00000001c0)="2ab3b53a5cc44b169b814e1b5fea6a0c34857606681021225c6872563421507ba07d74306a9b9e9762d7196c6c8538f9ef66b6697a4d11ba34fcb356ba2c03a034b958b16f6dccfa4a5103dcd91a482e9ed076cc1ac8a6a6113c419d6028c892cefc8a8767e5c7d06f51c407df7d72c3c3d70a2629f40addad9673675b3f6074ceee04754307e45fcc108d3c5f0dea7bd4b077ea20dcc56db2b7b6cf5848989cfde22bce1c2b42eac4e5d21fe34d66a2bfc002a1d1e0471e040a8639b354c808933327a6ecc242790ed9d378d6606556b9e2d1354d17bce7f36fc4c68e6aadfb") lseek(r3, 0x7, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000300)=0xffffffffffffffff) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffb, 0x4) 16:42:34 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101c80) 16:42:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="411c0403000000"], 0x178) 16:42:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x3, 0x0, 0x6, @dev}, 0x14) 16:42:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:42:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448d7, &(0x7f00000009c0)="e8a375e985957feb1a53250d9cdeb4539d2dd636120c5b6b80d00ef95984c13329c7f596156d026ac606bb7dbaa6c56995f7cd8b3f661f72eb4f45173cb069b86fed83bf451f9543e022fb488291979b00df5a1c16f313212a11672fa104749de9863f6c8aecf9d04f281fbd253b3895836ce86d12ce38b16e6e1fb3c0a20d142c745c6a02b1cee4e5cd0b7511a6dc1e997742") fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000040)="33c5a071edc32e71d9c2ef7dbaf634005fb4") ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x7) 16:42:34 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000180000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r1, r2, r3, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r4) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, r1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000080)=0x5a4, 0x4) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x1}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f00000000c0)="d63eb1ccb305d4672c3376ddf12b01cad46a66f4a55f31e55fc571096e6e2825aff7a84c8c9566d275eeedf35afcceeefd91f16f66a528fc133a7ddf9c48fd5057547776a62806d81e9a76d87020c3ba98ba716ce12d7ff3b116165e2bc1cbb4ac8a33b4b814a1a2b3cdc169684a53e0651d509fe528cbdae705545822c0b0ae001950717c4dfaf94f0557ef173753ee6eb74c85ceeebb026a5cca24416d42802af09aea9d19ee3c40") write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x27) 16:42:34 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x500}}}, 0x1d) 16:42:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x1d) 16:42:34 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x4b4d83) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000d76f06ac3e41cae8464d7cf3fdb2b536995dd505f59de322d73bb32e9fe0ccf8c08cc0c46acb05afd43f05f6134f033ce7899f530ef493ea7445b5f2ae2fa995f1c8cbaff9883f73929cff6cff2ab674ee29822374933c3a4fb8807433bf28802aa04de74ba69043fe0e1f3d0f9ccb6e31f495b5e3b6760fb591264372"]) write$sndseq(r1, &(0x7f0000000000)=[{0x4, 0x1, 0x20, 0x8, @time={0x1, 0x7}, {0x7, 0x5}, {0x6, 0x1}, @raw8={"bde8b357446b72c702176e13"}}], 0x1c) 16:42:34 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:42:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x4, 0x0, 0x6, @dev}, 0x14) 16:42:34 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x800100, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = signalfd(r1, &(0x7f0000000140)={[0x1000000000]}, 0x8) write$bt_hci(r2, &(0x7f0000000180)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xb) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000080)="ea09fca187c1585c9524b217ab85d2457bdb1839b502df9b3715f4f691630db2f32128d5ff130b90816fe3dd265ef7edec29b848d8e3d572647d0fd18ef8eac8fe8f01998d576fdea72afe1ad669a75e01a57597e765a99999a51751a177e18a7be9971603165179dfaa6d75ae0823d14a442d88058841894b085f4afccf6d6822b322425f3f5f364a15b6e9c6b391eadb1e9ee2000a20670f96c5866ed895292b7b099241dabc68710ad640492fa88325e8a1ff46eab14e62ee4666696c2c6b") bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:42:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="e0fd12b79909ae0e186a4b77c5abb3910c16be23808385eae225322869a66eb29dfafe76f4bd231b0399a831330720b9a6e5df2ab9ccde3958d85118df2a33d47af7538a4928969296ce7f585bfad791addbd3"], 0x27) 16:42:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x2, 0x2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x4, 0x1}, 0xfffffffffffffcef) recvmmsg(r1, &(0x7f0000000200)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f00000001c0)}, 0x36}], 0x1, 0x0, &(0x7f0000000240)={0x0, 0x989680}) bind$bt_hci(r1, &(0x7f0000000100), 0x6) 16:42:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x7, 0x0, 0x6, @dev}, 0x14) 16:42:34 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x600}}}, 0x1d) 16:42:34 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @le_add_to_resolv_list={{0x2027, 0x27}, {0x5, @any, "71e81aceb1f48e25dfc8b67fe52afbb9", "bec67bedd6652d5d7c55334256613e40"}}}, 0x2b) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x10}}}, 0x7) 16:42:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) [ 3212.484554] Bluetooth: hci1: command 0x0401 tx timeout [ 3214.532703] Bluetooth: hci1: command 0x0401 tx timeout [ 3215.443263] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3215.447846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3215.450449] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3215.457535] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3215.460374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3216.580669] Bluetooth: hci1: command 0x0401 tx timeout [ 3217.540892] Bluetooth: hci2: command tx timeout [ 3218.628604] Bluetooth: hci1: command 0x0401 tx timeout [ 3219.589242] Bluetooth: hci2: command tx timeout [ 3220.676582] Bluetooth: hci1: command 0x0401 tx timeout [ 3221.636701] Bluetooth: hci2: command tx timeout [ 3222.724664] Bluetooth: hci1: command 0x0401 tx timeout [ 3223.684658] Bluetooth: hci2: command tx timeout [ 3224.772574] Bluetooth: hci1: command 0x0401 tx timeout [ 3226.821545] Bluetooth: hci1: command 0x0401 tx timeout [ 3228.869571] Bluetooth: hci1: command 0x0401 tx timeout [ 3230.916602] Bluetooth: hci1: command 0x0401 tx timeout [ 3232.534182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3232.535295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3232.617342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3232.618587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3232.964590] Bluetooth: hci1: command 0x0401 tx timeout [ 3235.012659] Bluetooth: hci1: command 0x0401 tx timeout [ 3237.060663] Bluetooth: hci1: command 0x0401 tx timeout [ 3239.108625] Bluetooth: hci1: command 0x0401 tx timeout [ 3241.156647] Bluetooth: hci1: command 0x0401 tx timeout [ 3243.204655] Bluetooth: hci1: command 0x0401 tx timeout 16:43:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x1d) 16:43:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:43:06 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x1c00}}}, 0x1d) 16:43:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0xb, 0x0, 0x6, @dev}, 0x14) 16:43:06 executing program 5: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) fcntl$setstatus(r2, 0x4, 0x4000) r3 = openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0x82040, 0x217) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000140)={{0x3c, @multicast1, 0x4e24, 0x4, 'wrr\x00', 0x2, 0x5, 0x61}, {@multicast2, 0x4e22, 0x10000, 0xffff, 0xffffffff}}, 0x44) 16:43:06 executing program 7: r0 = open(&(0x7f0000001080)='./file0\x00', 0x80100, 0x180) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000002ec0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002e80)={&(0x7f0000002c80)={0x1c8, r1, 0x624, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x467}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x15b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e07}]}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "b812d69579d1f16f74b981ed65b6c0a469b39ceb72ad707a"}}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x98ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffc000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7d}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20006044}, 0x24008800) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002980)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000340)=""/158, 0x9e}], 0x4, &(0x7f0000000440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/55, 0x37}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/30, 0x1e}, {&(0x7f0000000800)=""/9, 0x9}, {&(0x7f0000000840)=""/110, 0x6e}, {&(0x7f00000008c0)=""/5, 0x5}, {&(0x7f0000000900)=""/125, 0x7d}], 0x9, &(0x7f0000000a40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/189, 0xbd}, {&(0x7f0000000bc0)=""/146, 0x92}], 0x2, &(0x7f0000000cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000001040)=[{&(0x7f0000000d80)=""/158, 0x9e}, {&(0x7f0000000e40)=""/80, 0x50}, {&(0x7f0000000ec0)=""/105, 0x69}, {&(0x7f0000000f40)=""/234, 0xea}], 0x4, &(0x7f0000002b80)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000ab55c1849c6ca7e7585e4efd3916fdec9e60dd8873b779a299c1c46496459cce05abb7761ed96bae7eef8de4902092bad25d92b8c8365f42bc809a587e28a0730cdc4d54abdb"], 0xb0}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002200)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002240)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f00000022c0)=""/202, 0xca}, {&(0x7f00000023c0)=""/159, 0x9f}], 0x2, &(0x7f00000024c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000025c0)=@abs, 0x6e, &(0x7f0000002900)=[{&(0x7f0000002640)=""/224, 0xe0}, {&(0x7f0000002740)=""/170, 0xaa}, {&(0x7f0000002800)=""/226, 0xe2}], 0x3, &(0x7f0000002940)=[@cred={{0x1c}}], 0x20}}], 0x7, 0x20, &(0x7f0000002b40)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000093cb70b135b3e15f7cbcf8bdf6fbc9effdb72138facc6ee33e16c9ac87bbbceaabd1448ce5ac18c49acb98c581fdbc2abf6ff6dfa014bcb04f2b6de20ab15c805990f7737d91f8293f4398b2ccc77cdce2df3c43dbcfd3656ce9c02ddeb0b02d2eed6602d41338f4cc79518421975ddd5cd4b1c3fff78e7f682567aa5ea5e58dac3ab9c4"], 0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) r4 = signalfd(r2, &(0x7f0000000040)={[0x1]}, 0x8) close_range(r3, r4, 0x2) 16:43:06 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000040)=@md5={0x1, "834e6577042b37716c3872c750caefdc"}, 0x11, 0x3) 16:43:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000540)={0x1f, 0x4, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000240)=0xe8) r2 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f00000007c0)=[{&(0x7f0000000280)="1b67f8f294ee2e5cce2cccf30de5cfff58bdbb167583151cd8edf1824e7e63c53c884bebc517686c750923669eac8887f082e08f67f7a37783dbb9e3ed961b7b92adc505e60b378dd4f5cbf0406cc374f77c88bbbf9df08400f855525f44122786c2bfd362bfc1853d3ea59d20079f1675bbfc", 0x73, 0x401}, {&(0x7f0000000380)="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"/415, 0x19f, 0x2}, {&(0x7f00000005c0)="fbe51050efc717ca559397ee29b16ea11b63cb15d5bec2388239f4cda84add66571774611dbd95120a23a4d932752d0e1c99d9f6f41660dad9f64acfa26cf99471a1421edbb395944a6bbca3bbae338a1963100c842c757e421e7ae8b8e7474d62c22cdff673b2616d98073ccb035af0816abfc791af8ac8a85a016d6a98dac484d027150c", 0x85, 0x6}, {&(0x7f0000000680)="3bdd0df799301728ae84640f2c91a6e8968dc65c7da9b2cc589322cf5deed9d3b90b60760a1c624ad50173aa688d4e72ad0f1804d7690748c841b579b5be1bab55d978090a3c8bd4b370fb9b27584e219edc167dfecf30e258ed1e0fab69b66c8f34be5c93f7afe80279042844b78c88a381140d0b16aa451d80d41c70f22166bf9c993432836d01d3cf577fc2f80b1ac9e2955b3837df5ec39bc3a844b9c7c9c3733a1dd31b8c6bdda57854affba7a4d187c78d532ec160b8b4e9c29a9b7b870d4809199b11b8b8dad73bf42356fdddf735a8a62068256fe47694ccc0fb5100806068ec19c842d6133867c2c52f4ea92255f9b83369a0", 0xf7, 0x100}, {&(0x7f0000000300)="f1d44d22a374dad49700820dbf956bb5c58073266fa1d46049e280c2a8a1eecce60073731d90e79020b82bae0f97e1b757be956bc8c2288b098a7416180ae5b6e7499befcb1f9ea9b3632a024bf63faa9411736e8562ade09c452fe982c956357550fb4fab64536eb5587e4b63c35ebaacd251e8", 0x74, 0x1f}, {&(0x7f0000000780), 0x0, 0x9cdf}], 0x9a0000, &(0x7f00000009c0)={[{'}%(+\x96$-@\x8e\xf1\x0e\xe0\xb5\x98\xac\x94\xbac|peQ\xe6\xf8N1'}, {'{+\x84}.]\'.(^)'}, {}, {'\'&'}, {'#'}, {'\x1c\xa1\xe1'}, {'\xed/-,%%]:%'}, {}], [{@pcr={'pcr', 0x3d, 0x800001}}, {@uid_lt={'uid<', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, '[\xb4\x1e\xd2\x13\xe1\x90\xd2\xa21DdM\x8e[O\x05\xe9H\xa6\xd55\xabe\xa5\xb1(\x1e\xbc\xacA\xfcK\xb5*\xd6\xac\x01\xd1\x8d\x90\xd7O\x1aQ\xc4\xeb\xbfM\xc8\xb2J\x8cn>7_\xf1\xf99\xce\xdc\xe1\xc8?\x9a\xba\xf1\xcf\x1b\xd9\xe1\xbbRG\x13\x16\xbb\xc5\x97\xc1g\xe8O#P\xdf\xc3M'}}, {@dont_hash}, {@fowner_lt}, {@uid_eq}, {@uid_gt={'uid>', r1}}, {@uid_gt={'uid>', r1}}]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) fsetxattr$security_selinux(r3, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) fsetxattr$security_selinux(r4, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x1) dup2(r2, r3) 16:43:06 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:43:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="071c0403000066"], 0x7) write$bt_hci(r0, &(0x7f0000000080)={0x1, @sniff_mode={{0x803, 0xa}, {0xc9, 0x6af, 0x40, 0x9, 0xe8}}}, 0xe) 16:43:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_create_cis={{0x2064, 0x9}, {0x2, [{0xe000, 0x8}, {0xd6bd, 0x4}]}}}, 0xc) 16:43:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}}, 0x1d) 16:43:06 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x28c881) 16:43:06 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) 16:43:06 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x2}}}, 0x1d) 16:43:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:43:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="071c04687a0be0b70425f715"], 0x7) 16:43:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f00000000c0)="2366d596d93fc07c3bfd8505f9e79e2b7294d0c8410d9e5a247c55682ad6590e770162f0fef854fa8bf6209d47607fcafa510aa90cb8f6df7bf9d37ce2fe380d38bceeb206e0346be110c4e18a114e34236296c90b947615dda5a47ce4d7289424db1ca71f75e8c8b0a5ef578f297fdb036717e8e48cc3dde6bf3b6798b6c402d31f1bfd1aef45ec1bdc43f47fe09db77f57d0be99e6be9fbccee9f1e3a025e6f8471fabb7638756254961") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) fsetxattr$security_selinux(r2, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$bt_hci(r0, &(0x7f0000001200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESHEX=r1, @ANYBLOB="570c36b445cc570dbf5a39281fa9463e1e3a1435acf3a04cb91c131bffdefbd67c9dd3a0d961a33f31eca19c820f85f6798ddb1230c2d5fcdcda014c906ba55c394ce8047b041374f2346aaeb09dc4d7b63b939dfc3781a3d21badbe47bb76901be5529b56fa197a3e29825c4810f7356d31e1e8439cbfbe6d830e59940ec530d612f6d236ec0f45670c8021198c4c724899d3015ec0b95807827e05e1886ae219889dcb2ca1b0b3a537d64d0fa9ae1f2c18a921c8b34c8a2600eb75e6ab2c1ce903332d2fb39d38bf6294ed601313e2cc5804e83fe627774a76fd259fe9c6b444aa0505b72a6bce8f719cdcf4cf7e2020600eed0e959911306ba90a9aaf4d344104034b9a589990d0f04b617926a1af055b4f5e5bc97f2889cde361719abc8fad25cf73f720e87fb03c4f7989de1376653e094c3d7b5666b585047b7ef12bcc9567b7ec3b0e9f0fdfcd07a2f99ef067ded4b6bd94843dcb90809f02424241d4d31c88d2d501e2bf49261d4e2c563232939ea99927382cc5890743257b422e3e01d165d5f5ea7e520ee383e411375ece4b4b70779f43172a244a39d55ad8a5b5429f2f19ae7ea8fc425223a77e8b2c5f72acaca942de16e6fcce08f1cb34e10522d8e2da7fcca7b4d2275d4335a6c4aa912ee9b7650a80b301f92d6c5e84bcb1f4b1f18855edb382811c96067ddf2fe9fe1ade01f2996d24e9ab6afea6b4db47dbd51f834e3ce5c71b6722105037b94214016a48322a29d3c3da248ff350a8bbf4c7572b4803ed9f602e755276d3b348124bd97e8c093aed7b2361e287851e7fcfad86563ff90e19de8615500b0da25f6f70810ba9ce226d8236fc10f6bf8348731488fb8aeb92fd25caa9bfac89805f0ee75235c6754d9bdc5d421c2c282cafd0673f83fbca785db22ba4c5340039a8ccdde39597cbe75b2d0f2f134fb693981a3450ec7bb2b80a5e8ef8e9721eb05bf1d53c2b502f217a18f0116b62f41c4745c44803a45b59540f7e2a5001c2694e3704c025773f8a1538e180f252fbd69abc88011fa3754fe8c0811b46f8abf7054ac8b250480e46ba040021778ee8c148719be60aa2a24d125cc0f87aa854d3085f85f6e8369bc70cc707dc08bc7c54a246482e9afbd062e93557c785a206327413f8b09611707a38155e54153b3c88f8f3175190a9f7d8c95f170055b105a63fdfdd9a95ebd80a3e848891b0005941e46372bc1b63425ef25ece977637986f89a3c272e4c40a131bca092b1a5a68182d85dd5a4a55aef5fed72bd7ccfb3f9e92edd9b37dfe52312ee3b6a722b760cdcf1084c91fa336dac62834b228b2401d716cd1f1e470b87d498bfe913b2bb3f2837779a8122c32ef6ba1353e3ec19527afe6ef5e6f3bd021e25c53a3a59330016b209cd9b610f59199f8bbc59129b0c922e62dffa063bba07333f956751e9d6139a479e161cff10b890d27a7a003bb4833f51e4528e8b98949e165b1c4ae8959f6e1425f76b4de4f9a33254a12af8026e5d12f0094a47c8363e363c425095fb8262505810584c5f2fc55ab64d1f46a268613d119432a161cc274ca16a60a8d4c8114ff60e9d1d1a025a6a799e1e8ba9c56e5cebaee468d1522cc825e8ac6df536350faeebbe7b2a9744a3f5ba2ee0db12b795e5ce7548f9c7122380d5e5119bf6d3f7430f2760d6b0fb4f807b22f5ac03c3f918f72edc5a35dfd2545a8e836889186f4cd7cd002b5a31334be3dc4ab13016bcaae6e887acecbc9e4516b66ee44f71625725939b42ed30d0018d8a6ccd9ce4804327182f850bfa827cf1448bd48e45637197b521bc6ff022be2c993cef9520ee1a53191f06b237a1f9209951f038ef83d21e984410d98c70bb5b38718d790fba268d6b53ef3877bb3189c0d851be36ed24ea309f36543e5fea9bcd1006403eed855c914cb80f7fc7623f3bab5b39821f9dcbbe6772979826d44befbdd95ac060ae7968499dd682c82b0555d3c5de29f1368b6bea9774b7994080091f854665c0091002c62ebbfd29e5497de7606a443caef05de2c59fc89228ebf64f7589f4bda091ccb814cf09845a9070c713e24affbadf3b54cb8022c949b7c4057bf2c54f9d99286e41e7fad3f4f18a6ddd998dfc614041c7d78a6f7a0b04cab048032d1caa371ab6ae2118ab422cf39739ce9521223d6a85dbf78f35a508154652fb4b6481c8a34d06551fd93660e7c865271ccb6f3d164805c0d58b95d549fbccfe97d57ad5dbaa5246aec6bb149e38883f72dd55879cb47d7ec424045414cd7a802106e72b25faa67983d3c74c85a3239097dcf3924ba20558d1fa31726ae02e8a8b66622c5756fc10ade3331f24855d376ef66809b75d433118d77945fd584222e129fa70d32420d5bae3dba1260491f7a6bdd0615c51f5e406b3670480205fc19755c0e1a1bfaeecec6a0c9984cb0796d9eabc3dbee6ca6f297312691c2a8c824f26aeaf481cb6e84858a1f625c94bb102742b5c044305868bf09e13d26570853f73bad6994b9ef9bdf05ff01666a72c0a601bd197e177a960a91675229f9b0db7be284119c4cbabc9e380339b8ddf7b5a983c5ed8dea747985bcd12bba8f88bd3b7a247b4c334c26f1aa24c342e3b4e60fefb0e711e979326a04435816bc57ccfc5f46db711b06801412548dff94bcff392ae9c5ce25a969c320050896538448ea2201ca152644cfadb2adac45b190e1e6d850a6068308891694e6b90b1fe6cf18583c35da695caec4a513a2e5f16890006043b1019786f25958fa8b12c44c0d52c1a71be045165bb78e2a2afeb69e1e125218f4924574713b0a5ec576e25d807786424875ccd4d375488684cd1f8b67375b20a99df917e8188d8ab05ab0fa1711b843e2232fef2a0614a0c0b32cfc4c1ee7408b95edb579bd6dc463f8bf09bd9bb01e899aca0812dbb39973c4681d5fd628d63a5e544ee65039b5449078094bae82154bd1ac6a22b8d5d5770894286783507f41f9c5d944c6a1f7cfc8c31686b0b2605c51f3fa03e78dd47dcbb2a6aade1f36ee383094fadb6493a9f32e49724756b51d953376a7fd2a2e818ee8c450fedef4654b72339c880a064c69149b0e3894350b4c2bedf4f4c8deca418f1713a471d1087cb2559eef0ae75f798df379fe7313a25b6830c32ece2054bd4ccdc9dd8be6623b35d335ffceb4d92de65e548535178d63535052a56dfda61a4a594de6f822b71ca8dd624a09a75c08f04d9d06df6952ebaa54c525d29feafa7a2b66f518ce0801816f5a61765da3c6b04672a82c015c8684bb7b1987061114712ca8695e8b0cf541bda04301445b1c8c8c10c9c01d5805ccd8d3706f9c12d84b89308d6443597b2a14292b9a12fbcf10e71fa230b913fae960b849c6a25d3a3b84bd876ecbdf74cc8905954ee0fe767c8d218c6331d23bf2ed3232df9e4c86eae3f2f50c4343070aacfc63ce56e91117a500cb2359409997982447acce49301dfaaafee97b46f4c55e58f83820f487995b1373eb4c4324833369b04398e7f4358c2da3e839e1c704d2f3e334d6b6a74294b8ecde56fc887f0580e7ac7bf98bbec8452cd5db1e106bdc67e68b2608c6011972a5222efc217857a2085eac8c4d70804efd49916aea729dae1e205db2af47877d279c33af4e18dd27e88ca15b5964ce59c4c12193a2faf6f786784c7df472f2a42faba600d8c91532e8ca86127aa7f3c46cea69ba511cb5f160fb20f6c2d3639ae8d04667896b551a3dcb5bc628cb5c0606e3bc4f01af621e260e299b1c44f81f6da6f766aa7cdf64b82ec2a46694db644a639d8f2689d93d6ce8232ec58f3592750a5814ef712c65d238465e7d3a7e29514b64530572dc5fc63e7c970d47a3ab5c5f45cd39efc945e6cdb5eca72d433a33a9da8574b87d0fce44ed8b153da8d4835906cf143eabcf1e12b6659f6c929396e044a16ebc1c8d8beef9e40e26cc01da61e12749fe5fd12fc5566897de14bde3772babaf761746acefbd261a41e97fc210ebedd21a35cc7c3e741bfe7d1164090efe6fe5214edcf59c65ce42b8b9538edb4f84e6f24d9b65831e67c74ebfd89c5163c3a9b52c603c8f278e02c744faa4d53d5565a5e2dbc400e61a70ee3958b2b6d948e8f9c6b6919b6f21776f3e0533074042d4bd2a7ca52c203d0d48ec627ef9b2eda7671c2366fd89df30f2a5a52467bba35cff5c4aad08fafb7a4ec0c3f6b964d43e039b5700e434166f655921590a5e5e3c652a2525699bb6d291042b1a283eba9ac2f45f94c6cb2c68354ed09d647c157861ebb0ee6c917375f9309de1c69c0ed9c13b0f9d74fcc77c456d5eb6f020dd3907e1643a59372a0209d0caea55a8d6eda756580950b9dd02f3f288a830ba4f2ee2e0c88a45d7b25ba66e8d68fbf2b3f2a40e190052f51c5d9335fd425f0a87efeaa236887096f08c0afde5296af960f0c35934278c8be568e0c065fbcb4e843b015834bee81b75ff83164243353f28c7025300fb21b29562f86b61f5e6652860c520ae4332f6c88545c802c7549be23dcab4b0f4f2aa15b0ffec1c0d25f98ab7bd9904edec0f048624b611908e220cbf11f0bd45cdffbdcedde8a8943d20ed3f941ed9235bab5de2cc6c6004155a600e9f8450344e04b8facbb171d1128ee8367927ad8d576a32c0449999333bf3a29e519f5898119b5603ab8ba6a739db8c8006260d47e4d37901fb6ebea91b43264f1566a7a2b7f04471a6b52d293023e1c6b7ed3c26bf3c600b452d253282b52f08abf1af0d77d0ecf0047bf2e66eca06f19e732d2cb6b89589f026ccdd870078440c782e258255a516590bd8470b91435e509489f97df523c37d9ea4dc2676fdfb524705247c0e36b6e803d8532f221142fdced03e6f3db113735c756ff4554a4aafa2164ba80138803e9957dd16d982d58b661a34135a71636fd8896d71e8a340e31dd593147b12cccb1e5ae6cde387b1a1ecb5be2ce870ab08369b5f6e8509e7064ab074927d22cc20d29f6845582f1d381c297d548c1201e72d2f6a84ff3550529c8eaa17369b2465eabd01eede50a2fb9b4d60920c15a5c36e825f0c0e1a901b5d26f27bfa42df5b1cc8c9087a808b793b8b103e6dc3d675d1cf5568eabda4ba168103f1eba5955a15cb8aae982d91f35be01c9eeb46e520a15cb9837ca4c72cad11a2287d34daf64eddbcfe64397f2570b3875cac57afe724f62defe17febb5a89ed9b25bf716b50647d49775a5e0dc1bd24afb2e6add25766bd445e215b65117ce23338c9a4448709fd47a7b4435ece62b86e2998d437e24c2c1d677c9452ebf8da6c0f8c35223d4d354bbf623a49917dbbeaf897a95e20d629025f5ab8a05a2e7d671c24a68176a2b81c596e5cf08b48de36b5b0368942299f3032796fad1e9101c27693c12ed033b54640fb7f2e957897aba1bbcc0db777a4c23fa9e6193b9e11a6050dbf38d6c03bf7ffa4eaeaff581829dd9dc0f4bbb21de236888200fc96fda15f6688e87e7a3e1e3512036cb68a4d86d23abe92ff349077e51367f304bf4f1b7f5eff171c749969410fdaaee3af5f675a27f2f49b4f8f8ff24b44fe6cc126a78a11efd64144e2650d1a737d8f2cf5d1613663d44db38ca8ac67d50d28b284a1ae71e6e58175dda9e4cd4b32a7f4484dbc8158a6b144e27d5f2bf50ad1a0baddc87b0e74f566cce5319d519dab8b80a9be3bb41f1c7b1f9cbb8f276ec9e3b57cce5406398ba6191b33738a859d5e0571422d5bec58cda1fd610e095711e0036e4a3db4201ebffb0cc86fc2160eb1e237799ccacea7770", @ANYBLOB="509a10bfea9ef6", @ANYRESOCT], 0x27) [ 3245.252624] Bluetooth: hci1: command 0x0401 tx timeout [ 3247.300637] Bluetooth: hci1: command 0x0401 tx timeout [ 3249.348583] Bluetooth: hci1: command 0x0401 tx timeout [ 3251.396722] Bluetooth: hci1: command 0x0401 tx timeout [ 3253.444632] Bluetooth: hci1: command 0x0401 tx timeout [ 3255.492683] Bluetooth: hci1: command 0x0401 tx timeout [ 3257.540599] Bluetooth: hci1: command 0x0401 tx timeout 16:43:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @dev}, 0x14) 16:43:21 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x4}}}, 0x1d) 16:43:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_sync_train_params={{0xc78, 0x9}, {0x5, 0x0, 0x2, 0x4}}}, 0xd) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="231c0403000000"], 0x7) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)) 16:43:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x8001, 0x1, {0x1, 0x0, 0xffffffff, 0x2, 0x5}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000000)={0x6, 0x1, 0x3db}) 16:43:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x1d) 16:43:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000100)="6558541a7f8542306e9e8233a15f4ef3172ab5183a648c8184bde304a7e39ce6b31a70849dafa50497d1fd6eec0e23c14b5aa33ea776a34216a8e08d8d609f34672c737bdbfccc5a79b190e25c214e49f97d8538ff422e54e1de764c39d67a33ae981b699c") 16:43:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc8}}}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:43:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0137202300000800c1716a796a2a29cc714489e154f95d6a1467f35052a6102486dd264daaaa2bfd80b42cf15e1fd37601ce70"], 0x27) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/244, 0xf4}, {&(0x7f0000000300)=""/125, 0x7d}], 0x5}, 0x9}], 0x1, 0x40010000, 0x0) 16:43:21 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) fsetxattr$security_selinux(r0, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRES64], 0x1c9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x40, 0x0) write$bt_hci(r2, &(0x7f0000001100)={0x1, @io_capability_neg_reply={{0x434, 0x7}}}, 0xb) close(r1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:43:21 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x5}}}, 0x1d) 16:43:21 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x1, 0x1) write$sndseq(r0, &(0x7f0000000200)=[{0x5, 0x4, 0x51, 0x3, @time={0x10000, 0x3}, {0x0, 0x6}, {0x43, 0x5}, @raw8={"e5069337664c3f820a62f447"}}, {0x1, 0x80, 0x8, 0x2, @tick=0x2, {0x4, 0x81}, {0x8, 0x45}, @connect={{}, {0x2, 0x7}}}, {0x81, 0x6, 0x1f, 0x4c, @time={0x28, 0x2}, {0x40, 0x80}, {0x4, 0x7}, @addr={0x2, 0xbc}}, {0xff, 0x3, 0x7, 0x0, @time={0x3, 0x7}, {0xb0, 0x3}, {0x6, 0x80}, @time=@tick=0x81}, {0x7f, 0x4, 0x9, 0x80, @tick=0x2, {0x20, 0x9}, {0x6, 0x5}, @raw8={"9bba827a58ab06e4669a88f4"}}, {0xff, 0x2, 0x4, 0x8, @tick=0x6, {0x7d, 0x15}, {0xff, 0x1f}, @note={0x9, 0x7, 0x6, 0x80, 0x7fff80}}, {0x20, 0xc6, 0x4, 0x6, @tick=0x7, {0x40, 0x5}, {0xff, 0xf9}, @time=@time={0x5, 0x7}}, {0x1f, 0x3, 0x20, 0x8, @tick=0x8, {0xf, 0xb9}, {0x6, 0x7f}, @result={0x4, 0x8001}}, {0x4, 0x9, 0x8, 0x0, @tick=0x3, {0x2, 0x1}, {0x0, 0x20}, @raw32={[0x8, 0x7, 0x2]}}, {0x81, 0x0, 0x2e, 0x6, @time={0x2, 0x4}, {0x10}, {0x20, 0x6}, @result={0x8}}], 0x118) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x4, 0x0, {0xc012eea70a834833, 0x0, 0x3ff, 0x1, 0x2b9}, 0x80000001}) 16:43:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x6, 0x6, 0x401, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:43:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)="bb3c51ad507d64c6c6c02d5908f3d07d238a41536199019ae63c74414363f4d08ac7ab86ffaf6536dc2d2e77c946e5d7d41f6f8dddaac2fd3a404ed9e044901da63cfa436979c2eda83e4e992e043e3e1cc9285c08201571df556dfa5bbe1ff8fbc8b16ff2eb6c864ba4ef88301bc780a867f7638c1e3108247dd8e54b6d16c6ae82ad91fc661c40d394b55d83b5e2bb5ffa8d5c37ccdb81da52c7ab3eab8f220d5bdcba680d7b629992ed078112edf8c64c756ed02df451f52f74009d772509eb05f3f2447e835b85d5ebe17f94bbba0d413f13b521663ce63f04") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_adv_param={{0x2006, 0xf}, {0x800, 0x7ff, 0x8, 0x20, 0x4, @any, 0x20, 0xa5}}}, 0x13) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x3, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:43:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x3, 0x6, @dev}, 0x14) 16:43:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00ff0000000000"], 0x7) 16:43:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, 0x1d) [ 3259.588584] Bluetooth: hci1: command 0x0401 tx timeout [ 3261.636723] Bluetooth: hci1: command 0x0401 tx timeout [ 3263.684598] Bluetooth: hci1: command 0x0401 tx timeout [ 3265.732561] Bluetooth: hci1: command 0x0401 tx timeout [ 3267.780723] Bluetooth: hci1: command 0x0401 tx timeout 16:43:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}}}, 0x1d) 16:43:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x4, 0x6, @dev}, 0x14) 16:43:31 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x6}}}, 0x1d) 16:43:31 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @exit_sniff_mode={{0x804, 0x9}, {0xc8}}}, 0x6) 16:43:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:43:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000040)="372b32ad12b58b4b36230ff66dad0e336b0e1c578823538df33450ace11db02ed3f4ac54798f8eae3791a38d34ea640462982dd54954b872440e32202f0de406ad8091a119f70e44b6ef6442f41e03a5f34e58e1c5c3db3d9f38eb14bbf10f043794271fe91c0300a163975dd396a60733a89a1ddba6a565a20ddbf6ebca7c0364e686f47df6631b57a8d4503a0403d47083683d0f2e620616215288441b55ff375e3d4a06c7b2a153106ebba4c78c9cf6ce8cc9c9cb12c3ccb0") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000100)=ANY=[], 0x7) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x400, r1, &(0x7f0000000140)="239cc7a3a39e08b4b93fc1fd4965344c2f57155568abd68c60047f718cc55508e1", 0x21, 0x1f}, &(0x7f00000001c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f0000000100)="0f7758ffe5bb86578791d73f3513cc80b348c16b7a71577871f6842a8723e5786a1e8ae835a8a02410eed6ca480a3acbdde83886e588e86d74568091474d") 16:43:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @logical_link_cancel={{0x43b, 0x2}, {0xc8, 0x1f}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:43:31 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0xa01, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x80000000, 0x3, 0x1, 'queue0\x00', 0x4}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x1, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="010bdba208b5307806625f0f829eb24900", @ANYRES16, @ANYBLOB="00022cbd7000fbdbdf250a00000008002c000000000008000600", @ANYRES32=0x0, @ANYBLOB="050037000100000006002800020000000500330001000000080034000500000008003b0001fcffff08000b00020000000500380000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x200048d0}, 0xa6bd204f2d0f6cdd) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x20040040, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x2) fsetxattr$security_selinux(r2, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x400) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f00000002c0)) dup(r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x4, 0xffff68dc, 0x1, 'queue1\x00', 0x7fffffff}) 16:43:31 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x8}}}, 0x1d) 16:43:31 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:43:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}}, 0x1d) 16:43:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) r1 = signalfd4(r0, &(0x7f0000000080)={[0x9]}, 0x8, 0x80800) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011c042c000000"], 0x178) 16:43:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x8, 0x6, @dev}, 0x14) 16:43:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x10, 0x0, 0x20, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:43:31 executing program 2: fork() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="cec3ae03000000bd0e7bf813e4b1"], 0x7) 16:43:31 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) [ 3269.828634] Bluetooth: hci1: command 0x0401 tx timeout [ 3271.876664] Bluetooth: hci1: command 0x0401 tx timeout [ 3273.924676] Bluetooth: hci1: command 0x0401 tx timeout [ 3275.972627] Bluetooth: hci1: command 0x0401 tx timeout [ 3278.020551] Bluetooth: hci1: command 0x0401 tx timeout 16:43:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x1c}}}, 0x1d) 16:43:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)="9b42b46f4a1e8b3d54ed06affb37ec5e5d490d34664b969cfa7903e9db01a362508354a2dde625758b3f70bfa284331f44a44f5f191d8bc993fc67ff13e145f1bd8e1be06bedf427bc31c8961647e51357e27cbb08284697b88f4211662ef9fa3bb47f") write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:43:41 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010a0407ff22000000000376b2bf8166f68da6b0db1e12a4"], 0xb) 16:43:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}}, 0x1d) 16:43:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @dev}, 0x14) 16:43:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x3, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x178) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000080)=0x3f) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x82000, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) 16:43:41 executing program 1: sigaltstack(&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000040)=0x8b, 0x1, 0x3) 16:43:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'ip6_vti0\x00', {0x6}, 0x3}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:43:41 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x1, 0x1) ioctl$TIOCCBRK(r0, 0x5428) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:43:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="87938970a2665469f92bf0b877011c04030200d9040e0389b199127e2af536eab508ca8a00658f5ae39842621a8a44a4b06ec545019ed6233a710295b207a9924c3668ac0176b31c8cc6d5df68d7051019bce03771febcd881ee3cd4f4ef165170c99509956177b5c869b950ca02291a5cafd2f9dcd87694ffea627f1305d430020e51056cc80d96bfe4de930dce60"], 0x178) [ 3280.068682] Bluetooth: hci1: command 0x0401 tx timeout [ 3282.116657] Bluetooth: hci1: command 0x0401 tx timeout [ 3284.164758] Bluetooth: hci1: command 0x0401 tx timeout [ 3286.212523] Bluetooth: hci1: command 0x0401 tx timeout [ 3288.260666] Bluetooth: hci1: command 0x0401 tx timeout 16:43:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x500}}}, 0x1d) 16:43:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00}}}, 0x1d) 16:43:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0xe, 0x6, @dev}, 0x14) 16:43:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @remote_name_req={{0x419, 0xa}, {@none, 0x7a, 0x69, 0x8001}}}, 0xe) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x1}, 0x6) 16:43:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x7) 16:43:51 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x480901) 16:43:51 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x9, &(0x7f00000000c0)=0x2) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x1}, 0x6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011c040300000077141875f9feb2a2d7d37ad1f748"], 0x7) 16:43:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9}}}, 0x7) 16:43:51 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2000, 0x28) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x6, 0x2b1f, 0x8, 0x0, 0x1b}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) 16:43:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x600}}}, 0x1d) 16:43:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x60, 0x6, @dev}, 0x14) 16:43:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x5c) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="071c0403000000a9966c45e5044199f6e90f3a14ace6934457423137bee5a78c2e75869366882d354901f94c47980f62184a7d722f9f27b4e8a08da1d6d45c2d79827e306992f7e9ee3d1ccae1831f53c0402a43eca8441618d0eeabd32b2457f9c4d814f6e556592d82d2db08d10866526568cd79c01e2579ca2c8bb2b5b72a270c132587df488bcf8f52f3e970e3ad56628a790993f0008e85ff08aab6"], 0x7) 16:43:51 executing program 1: ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0x4) fchdir(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x46e802) 16:43:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x1c00}}}, 0x1d) 16:43:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_write_def_data_len={{0x2024, 0xffffffea}, {0x80, 0xfff}}}, 0x8) 16:43:51 executing program 7: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:43:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_read_iso_tx_sync={{0x2061, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x3}}}, 0x5) 16:43:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:43:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:43:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x1, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) r2 = eventfd2(0x4aed66e4, 0x80000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) fsetxattr$security_selinux(r4, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x1, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xfc000000, &(0x7f0000000700)=0x0) io_submit(r7, 0x6, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f00000000c0)="07fbdf33efc31d9a903e7b90421b36cf5fce7bf22057cc6460f255885af08d201d0af4aca79f6966c4ec85360061b8e6f0062f80e668794e14ad643ff0de514c590a33c1fe66a0936b599f3742a9c6a21f0c59736b54318834d776fa18ea2a736f1122a83f0d896287cbce3cd1863080755585d98dd95178e15c8988ed7f0ce3bd1a7ee110aef604997f6c27fb34afb90b00355b94e4e570be96c1fbf072eeb2820968fbebb4feca8b0cd582c0848ad730821fbb2aab407cfa4cd3b67a9d6becb908956b409b12a7cd19c70a28", 0xcd, 0xffff, 0x0, 0x1, r5}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x51bc, r1, &(0x7f00000001c0)="5458e9b62b6207d2c971377e6478d8460d4b1c213e14586185f2a79fbb5095eed945c5228896863d11febf5998f13b0af3898efba02b85762ce9f26ea640a9b7b503923ba4f9e1c98d961ee9d08fd765b9f3ab850f1967af910264ce061d267ba64310d7b537f3ecd79b533ea8134dd3c2c4a5881a2cb151393eeb8f3fa0e3ed75fb842500", 0x85, 0x800, 0x0, 0x1, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0xff80, 0xffffffffffffffff, &(0x7f00000002c0)="e418cbe824f02ee5ce9fd9382bd94bcb94df7af7b5f40c5caab042914198461a03f2170d163ed39e32893f2d8c41b4190cdbe589fd11bcbd11f761cb33e411d70780e0017c4b0face262a0413e5c866ce1d8f5328a9d22cd9a8d399aa41bb9546b302b0bde964646a0ebb09b1c887647350e4c9a75f4b36a5ade01433cb60532fdc1a73c10504dbf89e7a8a17a79f34f05ed924747653edf933f7600d15112d70cab01026d20b8ac9c4de28ba23202fd15c977daa25b5aa901f07f9975025568517da6ba5dd27c1e07cc43e3a1e0", 0xce, 0x5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000400)="515e02bd9a0fbf1d0a61138cb19fe48b0fb974916b", 0x15, 0x800, 0x0, 0x0, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x5c4d, r4, &(0x7f00000004c0)="fb8015a129ffd4947d1873af2a4f942473ff5648cea45dfc7298dd779bebf50a2222f612864bf806ef4c711ca6b70a9b4f8a524bc5e2550301493e339247560bca7a4940d2659c990131cae133a00a453561cc05f33d0e12f4ce67784b7edbde64d245c4008da8efbb62d13f5942bd2962bd186e511dfbaf1a4e65d913a14b753d6bf9dd2f9703a6d4c15692e07bc2a3e14aeb71b4a8", 0x96, 0xda26, 0x0, 0x3, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f00000005c0)="99a500baed280b9d7da101", 0xb, 0x75a, 0x0, 0x1, r6}]) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r8, @out_args}, './file0\x00'}) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000740)={0x7, @io_capability_reply={{0x42b, 0x9}, {@any, 0x8, 0x79, 0x4}}}, 0xd) 16:43:51 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x185201) 16:43:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:43:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0x14) [ 3290.308581] Bluetooth: hci1: command 0x0401 tx timeout [ 3291.204550] Bluetooth: hci2: command tx timeout [ 3292.356672] Bluetooth: hci1: command 0x0401 tx timeout [ 3294.404611] Bluetooth: hci1: command 0x0401 tx timeout [ 3296.452595] Bluetooth: hci1: command 0x0401 tx timeout [ 3298.500554] Bluetooth: hci1: command 0x0401 tx timeout 16:44:01 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x9, 0xfffe}}}, 0x8) 16:44:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}}, 0x14) 16:44:01 executing program 5: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "5c3ecf"}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) 16:44:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x1d) 16:44:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="071cf6ce710403"], 0x7) 16:44:01 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x2}}}, 0x1d) 16:44:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x7f, 0x935, "3231e5", "af70c8", 0x2, 0x7, 0x65, @any, 0x1, 0x3, 0x0, 0x3f, 0x5, 0x96, 0x7b}}}, 0x1d) 16:44:01 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x7, 0x0, 0x1, 'queue1\x00', 0x6f90}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x2, 0x5, 0x1, 'queue1\x00', 0x1f}) 16:44:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="49ff0300000000"], 0x7) [ 3298.741102] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 3298.748051] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 3300.548523] Bluetooth: hci1: command 0x0401 tx timeout [ 3302.596597] Bluetooth: hci1: command 0x0401 tx timeout [ 3304.644582] Bluetooth: hci1: command 0x0401 tx timeout [ 3306.693526] Bluetooth: hci1: command 0x0401 tx timeout [ 3308.740588] Bluetooth: hci1: command 0x0401 tx timeout 16:44:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x24501) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)={0x6, 0x3, 0xb79a}) 16:44:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x14) 16:44:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x1d) 16:44:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) fcntl$setstatus(r1, 0x4, 0x400) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000180)="5286a7a66edbf4ede9f8af436db1b8713ca0becbddb6ef4a9495751e53323a6f67e2d4e2e49803c25ee13707029ce94637a00851e7edaa15d73f00f4bd4e82d9017919436820d21c9a58bc81bbc291a886ea1ea898146ce07d6ced27e9781d267254f899e6012b") bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x4, 0x2}, 0x6) lseek(r1, 0x8, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000080)="030f080f11a3c9932e896ec50e892220fbb0680e2cee0492da089d39cb0ed23e445d90d8a0a44ffe13064f361bce674fb46f76e40419fe2553638fec136969f388f774603143eec752d33604e4b1814f71908dba9312fbe96618e56ca0c42c7a8a00e63a643d28a93a6073015a88443016340a7e0a1e2906bf9cdd92229ce973b53e0943e1c346fc2c160a8be33b15266bfa8eab9f58f4de05171fb4acc631c391b510e037944e0021f219a25c9c0ec7efa475206fa9400fcd8b647fd47862d711379789e4bfd47b73278e53be3ed9eb4890e04f10682ee181eff7e100b3d11635aa86ca95afe360945024e45d525dda5e6be4790451") write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:44:12 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f00000000c0)="768646729eb915968fee74d10049a92ac0079530d8fea49195ff5ae892304fcaad61717c617957f3a2aa0158880fdfc98dead9926b9802c8ac988d4b89b09c8a7956e7b309041fde485feab9b9cbdeca3ec0e4687b2480832e595c8c98932aedb13bef7dbbbc2792638ab4e9e53b2d004731c6b5994c2395b6991ebe205f7a7a60cc6c784efe2d764424aada9d56d56b82e29c154ec992cbe8ab2f8e2f07fa5e15c2366eaf41dd1491c2e67cf1a611") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f0000000080)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x5}}}, 0x6) 16:44:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x4}}}, 0x1d) 16:44:12 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8000, 0x6, &(0x7f0000000480)=[{&(0x7f0000000100)="33309d59a4d990981fa135f361c7ae1728bf1d3e237fceace817db4d8de05174eb8de80e5e918aa8f8882288dad0aa6dcb5e0de70bfaacfa75ff8d2d99a5181079530167b20f207cec6f8a73ebd48d985f47756e93a034c0eeb04e2b5c64cb613d8b5f9b25a766ca9d735e70ac6bd64e90b77409d475b7017627e4427b78bcbf50ed90aa13fdd7f3fa5b9734dfc2758ad78ef3d019ce4f7cdf2a589f26a4ce0303f344b6b6c471a4413d426064beceec528d8b04c607e94625cbc2d04bce045b9f8d85dc6aa4411d99649b727047296b4c7b545b53da11a7742f205d37531943cca18064849160c49a345b22f28560a43eda071ab1bcbc", 0xf7, 0xff}, {&(0x7f0000000200)="0218c2ad7756da31d7e2a61a83d93f62ff7596667472ba3daaa01b127d081c6d8d6ad4d58656555c09580a7113b8156a05fea1a94d7b8ccd361ac0d488c3deda6519c3f6d21ed675284919c59d55f8a9bfd5c2d9ae6ed7abdbea5e8d935888abb3b296a18b966c9dd2afbdcfeb1106fa9c2df88e4c06583a24bfeff795e65e688aa43df69fca05", 0x87, 0xc891}, {&(0x7f00000002c0)="024739882418d6ad75d54432639c0835b257c2617d6aeaa7df7baebf0b3711af91a7447c2545f54bbabbae5676122c594377d7b773434b001736dac9b704dffcfa00de1ad250b0d06b358e3415e2ec5fd062c75c52e794143a4d9ed06aa6b7d6a7f460902b0c190664f1", 0x6a, 0x100000001}, {&(0x7f0000000340)="f5b6941b7947bf4907b14783d5eb9fd48099d98b8f06d2960ecf591c77719025ffd68f11fd8d9ce49ddf16c4a685caba088e0829fcc37f40e9c30aaf402965303cf50aaf08526bf882d88cc741743f4d1694639ae3ca39db8f4c2bda5c2e66b23f07f74c11ddbf55416fb16ad1f0ba205a4255b5aefd4baf3d86f188843b561fd7ae51c34648cac73f542ac6978b48f14bc47b0cb785d2d31f7fecb55ed2c35659041087612061a9d2cac2", 0xab, 0x20}, {&(0x7f0000000400)="38d33be0792148c2704ab64faa47c3b854bb672784a406caa162", 0x1a, 0x1}, {&(0x7f0000000440)="4393af978907f170a60dfeb50dcdab48054bf803beed70df30e93017d83111edb361f26cd36e99fb8c5eb8d2346d495c", 0x30, 0xffffffff00000001}], 0x2000012, &(0x7f0000000dc0)=ANY=[@ANYBLOB="726f6469722c757466383d302c756e695fb75a786c6174653d312c73686f72746e616d653d6d697865642c64655c636f6e74ffffff7f000000006e66696e65645f752c646566636f6e746578743d756e636f6e66696e65645f75c2a86b1ea3ba3d5688eb5df48a2ca51309535db764c4e16453c98d35"]) recvmsg$unix(r0, &(0x7f0000000c80)={&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000680)=""/64, 0x40}, {&(0x7f00000006c0)=""/19, 0x13}, {&(0x7f0000000700)=""/76, 0x4c}, {&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000880)=""/108, 0x6c}, {&(0x7f0000000900)=""/151, 0x97}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f0000000a40)=""/175, 0xaf}, {&(0x7f0000000b00)=""/63, 0x3f}, {&(0x7f0000000b40)=""/16, 0x10}], 0xa, &(0x7f0000000d00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf0d221578ddb0ec86a7d9dcdf9a0ad9752a9c750c45215f5527deb805e58e879d7a75bfdbec363790ed2fdda0a5a87c439daf74088ec12751d4600036569162566d4f5acbea775d8c853165ef04378f3813398684a2dabd3530c491bfa5af2e5a360069043ed86559df3cf1bab0e12d6f333eb1589f341651a1bf2fd604c34064612bdb85b41063db03ca"], 0x38}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) fsetxattr$security_selinux(r2, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000cc0)=0x20) write$bt_hci(r1, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:44:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="013720889f00000000c1716a796a67f35052a6102486dd3f4d93aa2bfd80fffffffffffffffc9a29728cf45e701fe60ad37601ce60"], 0x27) 16:44:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x1, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000440)='wlan0\x00', &(0x7f0000000480)='./file0\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1d0, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1a0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x29}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400000000000000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x1}, 0x8010) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$unix(0x1, 0x2, 0x0) write(r4, &(0x7f00000000c0)="cbe4c78f1056e42a934a7d2128a20e4d1d6884ec85382d702ec89c8a9499a90d05adf149524948dce30f000f1c725b3b9a033bdb7a0c677d3ccc07d7378374f3bc8c5682", 0x44) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000004c0)={'wlan0\x00', &(0x7f0000000400)=@ethtool_gstrings={0x1b, 0x4}}) bind$bt_hci(r3, &(0x7f0000000000), 0x6) write$bt_hci(r3, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) [ 3309.362951] loop2: detected capacity change from 0 to 264192 [ 3309.401147] vfat: Unknown parameter 'uni_·Zxlate' 16:44:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000200)="c9168d67f9b4b6156e504d8ee1351b4a1deb51bfdebe533a2e8079168b624c875684700d1937a17b2b8e0b1f0d607414d31f1a465e816d65e1dd53cfb87ac609f964f56db639ba0b2a8cceb775f9d19fcbf3d1b258743a1cb28d7f56dbd4423bb5a75efbca3c0f404e4b0f88efb501583f7092ea5e6baf92a284b4b7b8004e880f6b328d02654c5272aa0254c5fea4a605b6bf10075b2fd37d28099c0dcbe60efa0aa7e710b83625eace95a246d0040cb0bcdd5a1b3c43bce7dbbf920fb5e0b29e515b7897f91d5d19c13eedc3e11fa77d50e8741594748e86a6a3", 0xdb, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="3c0c986f6e0f19c32c269c0145", 0xd, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, r1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) 16:44:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @reject_sync_conn_req={{0x42a, 0x7}, {@none, 0x7f}}}, 0xb) 16:44:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0x14) 16:44:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x5}}}, 0x1d) 16:44:12 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @sniff_subrate={{0x811, 0x8}, {0xc8, 0x767b, 0x90, 0x7ff}}}, 0xc) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:44:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}}, 0x1d) 16:44:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01e64015b22f1c8278042400"], 0x178) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) write$bt_hci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="01071c03a658cebc7056921e426148a607007f43128ae4d73e0812cbb923ecc549ca1620297c00000000000000"], 0x7) [ 3309.548029] loop2: detected capacity change from 0 to 264192 16:44:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x6}}}, 0x1d) 16:44:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x81, 0x810200) write$bt_hci(r1, &(0x7f0000000080)={0x7, @create_logical_link={{0x438, 0x21}, {0x64, {0x40, 0x2a, 0x7, 0x7fffffff, 0x1}, {0x8, 0x7, 0x8, 0xffffff8d, 0x5, 0x1004}}}}, 0x25) 16:44:12 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x3, 0x100, "2637f3", 0x0, 0x1f}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) fcntl$setstatus(r1, 0x4, 0x42c00) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01330007c26d9c62bda406c1f1086ae40200"], 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x13}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) [ 3310.742547] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 3310.743628] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 3310.788553] Bluetooth: hci1: command 0x0401 tx timeout [ 3311.876555] Bluetooth: hci3: command 0x0406 tx timeout [ 3312.836581] Bluetooth: hci1: command 0x0401 tx timeout [ 3313.924568] Bluetooth: hci3: command 0x0406 tx timeout [ 3314.884826] Bluetooth: hci1: command 0x0401 tx timeout [ 3316.932544] Bluetooth: hci1: command 0x0401 tx timeout [ 3318.980548] Bluetooth: hci1: command 0x0401 tx timeout 16:44:22 executing program 7: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8000, 0x6, &(0x7f0000000480)=[{&(0x7f0000000100)="33309d59a4d990981fa135f361c7ae1728bf1d3e237fceace817db4d8de05174eb8de80e5e918aa8f8882288dad0aa6dcb5e0de70bfaacfa75ff8d2d99a5181079530167b20f207cec6f8a73ebd48d985f47756e93a034c0eeb04e2b5c64cb613d8b5f9b25a766ca9d735e70ac6bd64e90b77409d475b7017627e4427b78bcbf50ed90aa13fdd7f3fa5b9734dfc2758ad78ef3d019ce4f7cdf2a589f26a4ce0303f344b6b6c471a4413d426064beceec528d8b04c607e94625cbc2d04bce045b9f8d85dc6aa4411d99649b727047296b4c7b545b53da11a7742f205d37531943cca18064849160c49a345b22f28560a43eda071ab1bcbc", 0xf7, 0xff}, {&(0x7f0000000200)="0218c2ad7756da31d7e2a61a83d93f62ff7596667472ba3daaa01b127d081c6d8d6ad4d58656555c09580a7113b8156a05fea1a94d7b8ccd361ac0d488c3deda6519c3f6d21ed675284919c59d55f8a9bfd5c2d9ae6ed7abdbea5e8d935888abb3b296a18b966c9dd2afbdcfeb1106fa9c2df88e4c06583a24bfeff795e65e688aa43df69fca05", 0x87, 0xc891}, {&(0x7f00000002c0)="024739882418d6ad75d54432639c0835b257c2617d6aeaa7df7baebf0b3711af91a7447c2545f54bbabbae5676122c594377d7b773434b001736dac9b704dffcfa00de1ad250b0d06b358e3415e2ec5fd062c75c52e794143a4d9ed06aa6b7d6a7f460902b0c190664f1", 0x6a, 0x100000001}, {&(0x7f0000000340)="f5b6941b7947bf4907b14783d5eb9fd48099d98b8f06d2960ecf591c77719025ffd68f11fd8d9ce49ddf16c4a685caba088e0829fcc37f40e9c30aaf402965303cf50aaf08526bf882d88cc741743f4d1694639ae3ca39db8f4c2bda5c2e66b23f07f74c11ddbf55416fb16ad1f0ba205a4255b5aefd4baf3d86f188843b561fd7ae51c34648cac73f542ac6978b48f14bc47b0cb785d2d31f7fecb55ed2c35659041087612061a9d2cac2", 0xab, 0x20}, {&(0x7f0000000400)="38d33be0792148c2704ab64faa47c3b854bb672784a406caa162", 0x1a, 0x1}, {&(0x7f0000000440)="4393af978907f170a60dfeb50dcdab48054bf803beed70df30e93017d83111edb361f26cd36e99fb8c5eb8d2346d495c", 0x30, 0xffffffff00000001}], 0x2000012, &(0x7f0000000dc0)=ANY=[@ANYBLOB="726f6469722c757466383d302c756e695fb75a786c6174653d312c73686f72746e616d653d6d697865642c64655c636f6e74ffffff7f000000006e66696e65645f752c646566636f6e746578743d756e636f6e66696e65645f75c2a86b1ea3ba3d5688eb5df48a2ca51309535db764c4e16453c98d35"]) recvmsg$unix(r0, &(0x7f0000000c80)={&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000680)=""/64, 0x40}, {&(0x7f00000006c0)=""/19, 0x13}, {&(0x7f0000000700)=""/76, 0x4c}, {&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000880)=""/108, 0x6c}, {&(0x7f0000000900)=""/151, 0x97}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f0000000a40)=""/175, 0xaf}, {&(0x7f0000000b00)=""/63, 0x3f}, {&(0x7f0000000b40)=""/16, 0x10}], 0xa, &(0x7f0000000d00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf0d221578ddb0ec86a7d9dcdf9a0ad9752a9c750c45215f5527deb805e58e879d7a75bfdbec363790ed2fdda0a5a87c439daf74088ec12751d4600036569162566d4f5acbea775d8c853165ef04378f3813398684a2dabd3530c491bfa5af2e5a360069043ed86559df3cf1bab0e12d6f333eb1589f341651a1bf2fd604c34064612bdb85b41063db03ca"], 0x38}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) fsetxattr$security_selinux(r2, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000cc0)=0x20) write$bt_hci(r1, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:44:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x1d) 16:44:22 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0x3f, 0x2, 'client1\x00', 0x6, "6cc737be08c4e05f", "3d36c27aa6aba72a534e1cdea53e025ab9e7d5ebdfe417eabbb1501decff9772", 0xab, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x10000, 0x2, 'client1\x00', 0x0, "c17701daff1a8055", "eced298f945d0da0b1c322750e32d5357294525596258053ed07f1d73eb08421", 0x10000, 0x9}) r1 = syz_open_dev$hidraw(&(0x7f0000000180), 0x1, 0x80000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x10000, 0x0) fcntl$addseals(r2, 0x409, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xc4, 0x0, &(0x7f0000000480)=[@decrefs={0x40046307, 0x1}, @acquire_done={0x40106309, 0x3}, @free_buffer, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x1, 0x2, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/191, 0xbf, 0x2, 0x2e}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x1000}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x6, 0x2, 0x35}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/18, 0x12, 0x0, 0x13}}, &(0x7f0000000440)={0x0, 0x20, 0x38}}, 0x400}], 0xbf, 0x0, &(0x7f0000000580)="bb6ce2922eb462f11e4a3d8f8144b54e2d66a34f5dae49041891a03297583921a5387b76a6d70f4063739d03c702fa80abe09758f8b6660dfed0d8497170c7466dd2f55c9819084b2432bd0eb416955b0ca8abdc5e99cb29a43ae8edb90066e18618fd9c05d88b7fbecd9e86baec9e57a27e676c5e5e98ee2eb67ba66cbcb4b457dcca388c27c37542ffdf4cc70dd99407f0ba68401869684b545a19b93d20ed4821638879edc1f7c7247119b005e3aeb0a4ca99541e1d18125a58784cdffc"}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) lseek(r4, 0x7, 0x1) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r1, {0x3ff}}, './file0\x00'}) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r7, 0x1, 0x1) r8 = syz_open_dev$vcsa(&(0x7f0000000bc0), 0x40, 0x40000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x800448d3, 0x0) lseek(r9, 0x7, 0x1) io_submit(0x0, 0x7, &(0x7f0000000d80)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000006c0)="e180467049854814f53c699183ab15f46009dadfd7e28d8ab76ef764ec04594aae9c4b5437cd9307e9", 0x29, 0x100000001, 0x0, 0x3, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000780)="32a4bb3fd4918c13d9dbaf48e146ddd2ba713a47b70c0ec726fa", 0x1a, 0x56a0, 0x0, 0x6, r2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x7, r0, &(0x7f0000000800)="4b3b7b968d9826f839ceadf33f2e2a5d5093639c28e1b264935f99d4b6585007f3b4cf65bfdf9c70ba05a4d71fe86ed12e90197f252fdf5df6ea10f0ef89cd4f5693202dbb49ce7b8518a24cc126184bd15978541272d983a301ba0fb8ea7fb70d01bbffd8b733c31411fdb07fb0f2fea3247820a4948ba3c39b2a3f234f798a6f7728927cc7249fa13564373b1a6711c8b0053b551a13fe9027c8b385861be9948eead0b22fd274e18a12c6ff6afa56874c23b272833c427e7bde396a896e92b2b76929eef76409c1d85916c3d78e3c0ee804857cf8ec60a29b4095c18c8eadad74fcb810fb19070e8f", 0xea, 0x7fffffff, 0x0, 0x1, r5}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, &(0x7f0000000980)="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", 0xfd, 0x0, 0x0, 0x0, r6}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000b00)="00cd59f6af1448d3bff15c6844383287cc6630613c250017875b494b069b", 0x1e, 0x6, 0x0, 0x0, r7}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x3, 0x800, r2, &(0x7f0000000b80)="c4a752753783b95b89e606fa7291443996575caf4a5dbd58ad3c6e4903f2282b29a58f8da3c739ff1a8c0a6d", 0x2c, 0x9, 0x0, 0x2, r8}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x3, 0x4a, r9, &(0x7f0000000c40)="3f348f5d486c6cd4e9b252cb8ce1fee1ade6254212432efdd24ef63161d38b309315101a6f76b98c3f70baa6968b4adea6348f2958a157ae7bc77bd2c7643a4400eed3b1e18e71c0b2a0843894b2e4e6e4c6452959c540dd990679a08230cb3b60c2eda52dde8b4348a6af58c1f4bd8228d47f238a3c0540d1980ae75566815a5e0133a9c104e1a9d3040bee0ccb9395b217fd696560ae4b34237823cc75363c6aa98a994c5e0a0a93b6ae75e8f91cbaef61e19f413a4d4b7c5fe4d178b91aa3e1995aa3e72bd61778249cf08ed3247b912d36bd69b5c1d8690ddff8eb0e59357c544b94e91a2aebb731ef790f95181bc05c7cabd757a1ca", 0xf8, 0x95, 0x0, 0x1}]) 16:44:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) 16:44:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x8, "b34d87", 0x40, 0x3}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @reject_conn_req={{0x40a, 0x7}, {@any, 0x1f}}}, 0xb) r2 = memfd_secret(0x80000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000100)={0x2, 0x401, "a8d290", 0x12, 0x8}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) 16:44:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x2, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) write$bt_hci(r2, &(0x7f0000000100)={0x1, @link_key_reply={{0x40b, 0x16}, {@none, "23ed390fe3fa9d53dfb31b6223099343"}}}, 0x1a) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) lseek(r3, 0x7, 0x1) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000040)="17fe09cded18bb1d45987a") 16:44:22 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x8}}}, 0x1d) 16:44:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) bind$bt_hci(r1, &(0x7f00000002c0)={0x1f, 0x3, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000300)={0x7, @delete_stored_link_key={{0xc12, 0xfffffffffffffec2}}}, 0xb) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@get={0x1, &(0x7f0000000080)=""/214, 0x8}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1, 0x3ff, 0x5}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0xc151, 0x10000) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) lseek(r2, 0x7, 0x1) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000340)="ae137b9202a09d85202699d7d922a4db6baca17695c38832582f458a1bef7299954f2b5fbe96dfeae9acd2602d8d8eab8812187fb0f032602d03be8c8322c3301b21412127094281c82abb6c28ddbc985b896ba9db4c795160af482957b2acc44153a1d705656001ee1f84edfee05812969323ac2958802d4daa01ef20319d9b4edd2bfb72f90d8949ee203ee6a998cd311ce21451fc0ec1f4b19834587b60a390928a4ac7c5c98a6627331bc6b200865aa6eb070b05000000fd231ba07b4a032e16e8f98d3df09132256cf62c26373e3a2cba3d0c00000000") 16:44:22 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x1c}}}, 0x1d) 16:44:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a1c0403000000d810a93badaf6bfaf99fdddd1be957157cab72a67489a563db9a615a92a8b4ffad4e091d61942647580a8f9742faea479127744eefb7da780947cf01794a64fd223be3292df2c099a502d5c56388feb6ad66131d30d9fd60e49f931505669a31bae5aae9aacc38158cd8a1d047148408a586f8009775c4b64828af5612fffffeffffffffff7bbfe8ad911348b7ffee85e0dba11bec5730ca1eb4c3a0df1ae7efa2150f0bd896f54952263febeef3fe0000000000006384b058414b05e4b65576828b5d07522bdd340e3196613555211e336dd14c751b206970634e1c551e"], 0x178) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x9}, 0x8) 16:44:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 16:44:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x14) 16:44:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, 0x1d) 16:44:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_create_cis={{0x2064, 0x19}, {0x6, [{0x0, 0x21}, {0x1, 0x3}, {0x9, 0x1}, {0x8, 0x800}, {0xfc00, 0x877}, {0xf882, 0x40}]}}}, 0x1d) 16:44:22 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x4, @time={0x3, 0x4c6}, 0x4, {0xff, 0x9}, 0x7f, 0x0, 0xf7}) 16:44:23 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x500}}}, 0x1d) 16:44:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x60}}, 0x14) 16:44:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0137202300000000c1716a70ab6bc4a89be7cbb17408000000000000004ca2d2c7182092ffb5f696b3ac0b0fbfbd450505512edcfd9761c1bada53d3c5e4eecdbfe2822056f5d350aef989903f2dd06d48762f62ff632f38ff1a37b25ac565b4318d03642538e45d03254ade3ed728874501a3781d3fb4f34b0ea2c1e538419b00"/142], 0x27) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f00000000c0)="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") r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000080)) 16:44:23 executing program 2: iopl(0xbc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0xc8}}}, 0x7) iopl(0x81) 16:44:23 executing program 1: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7c87}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xde}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20040080) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) [ 3321.028513] Bluetooth: hci1: command 0x0401 tx timeout [ 3323.076580] Bluetooth: hci1: command 0x0401 tx timeout [ 3325.124712] Bluetooth: hci1: command 0x0401 tx timeout [ 3327.172684] Bluetooth: hci1: command 0x0401 tx timeout [ 3329.220653] Bluetooth: hci1: command 0x0401 tx timeout 16:44:33 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x84501) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$sndseq(r0, &(0x7f0000000040)=[{0x5, 0x0, 0x62, 0x0, @time={0xfffffeff, 0x7fffffff}, {0x81, 0x5}, {0x5, 0x5}, @time=@tick=0x6d800000}, {0x56, 0xff, 0x40, 0x7f, @time={0x4, 0x6}, {0x1, 0x5}, {0x1}, @result={0x3f, 0x8}}], 0x38) 16:44:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:44:33 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) fsetxattr$security_selinux(r0, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRES64], 0x1c9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x40, 0x0) write$bt_hci(r2, &(0x7f0000001100)={0x1, @io_capability_neg_reply={{0x434, 0x7}}}, 0xb) close(r1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:44:33 executing program 5: getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)) r2 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)=ANY=[@ANYBLOB="010000180000f891000000003f3872f32989980cab027435b9933b51ca652d326509e188c03802ae90d89291579cabbc70ae77196685917b2b2049d447b98d337032", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB=',/file0\x00']) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0x12, 0x3}, 0x55, 0x5, 0x3ff, 0x7ff, 0x0, 0xffffffffffffffff, 0x8000}) r6 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setgroups(0x9, &(0x7f0000000280)=[0xee00, 0xffffffffffffffff, 0xee01, r1, 0x0, r3, r6, 0xee01, r8]) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="706d756a044142d59beb4b734c8c59a91f6055b3358a4a96"], 0x178) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r10, 0x1, 0x1) r11 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x1, r7, 0x0, r7, r0, 0x22, 0xfc4}, 0x3, 0x3, 0x0, 0xabc, 0x0, 0x0, 0xffff}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000c7203980920d128bc528581e12fe4ac3a5884041d77929770bcdfdaee024f615645921c2c6d66cc5fffea171434ad702b9f6abb96f5d73e27ea11518b2dd7051ba1e689246db659ec09a80f0874c94e35e68e9034648d16edeacb8176336d45dd31f97e89950ad03285e29e574069211bcaebe2685f0060a91d7d550bde773a082c115", @ANYRES32=r11, @ANYBLOB="01040000030000002e2f66696c653000"]) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) 16:44:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0xf36b213efb1e7814}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:44:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}}}, 0x1d) 16:44:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x12) 16:44:33 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x600}}}, 0x1d) [ 3331.268587] Bluetooth: hci1: command 0x0401 tx timeout [ 3333.316560] Bluetooth: hci1: command 0x0401 tx timeout [ 3335.364584] Bluetooth: hci1: command 0x0401 tx timeout [ 3337.412645] Bluetooth: hci1: command 0x0401 tx timeout [ 3337.860596] Bluetooth: hci2: command 0x0406 tx timeout [ 3339.460597] Bluetooth: hci1: command 0x0401 tx timeout 16:44:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x1c00}}}, 0x1d) 16:44:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x13) 16:44:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x4, 0x4}, 0x6) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x27) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) 16:44:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}}, 0x1d) 16:44:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x6}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:44:42 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc0d81) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x6, 0x5, 0x1, 'queue0\x00', 0x1}) 16:44:42 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) fsetxattr$security_selinux(r0, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRES64], 0x1c9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x40, 0x0) write$bt_hci(r2, &(0x7f0000001100)={0x1, @io_capability_neg_reply={{0x434, 0x7}}}, 0xb) close(r1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:44:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0138202301a90109993557895c2d71e0b60823021752725a42d25a8065a1f42b12f681e5f59c336730373c0449fbfd6edbd1c7f7"], 0x27) 16:44:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b82ba5f7b62e4612c550070cd7f8b8af82ddb62a6756e36624e20ee8d7bf9309047feb92b2fd3934f4c231e71deeab89be9b789a58d099cfaadfd74f576a2cffd0025061ec190661256d81095a74061791ebd2b6deeb64f33a78d74e9011574e39d8ca95d3a5be7beb95971505a73dc1057a691480b8fe73565ac21cf628fab037dce79d8fa7f8e3261d81578de1eae024cc4fb4f6a93665023697c7a94460aedde1c3fb5cf1e09a34da16724cf525fa71eec60932185f03740ff529c434978a0a97bc2dc489fe7e7b258776475546bd58ab80793e00d4dc6a58dde324a996d7a09b5a9"], 0x178) 16:44:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x1d) 16:44:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}}, 0x1d) 16:44:42 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x1, 0x1) openat(r1, &(0x7f0000000380)='./file0\x00', 0x2c0040, 0x184) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x111001) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000100)="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") setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x6, @multicast}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x2, 0x5, 0xe0, 0x9, 0x0, 0x6356b909, 0x2000, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp={&(0x7f00000003c0), 0x8}, 0x4b01, 0x9, 0xe4, 0x1, 0x5, 0x401, 0x7f, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x9, r0, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x3, 0x80, 0x1, 0x8, 0x40, 0x7, 0x0, 0x23, 0x10100, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000240), 0x5}, 0x14018, 0x80, 0x80, 0x1, 0x1, 0x4, 0x3, 0x0, 0x4, 0x0, 0x40}) sendto$packet(r2, 0x0, 0x0, 0x24000040, &(0x7f0000000040)={0x11, 0x1, r5, 0x1, 0x0, 0x6, @dev}, 0x14) 16:44:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) fsetxattr$security_selinux(r2, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f00000000c0)={{r2}, "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"}) 16:44:42 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) fsetxattr$security_selinux(r0, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="de964094a7b996aa05fc50788ce0dbe8e0d9e6b39f450f9cccf60c0897604ef4316be73addcba49e8b0c93f0710e65dda9dd4cb36f960a33216dd7f128f35b3b3a1c4b1747dadb67d1edcc540b06fd90d17e7d8e0498470a60e73e62810887e4d95d8dab8520b540075d60299b3feef31830f1427d53a90f3437cacdebfcd6283ec934643f23eaaedb7d2b8f682246157920e7f7540439410d22fedc93e21a59c6e7987484d0940915759471414e18f77337b2536fa3f38f0456a948f58e934cd57166e44673bba32d7f7fdae95fe8eb1110b400fb36d76f53b977bc152c18ea61c29e828a093862119912fb2b9ada50c2d410d098ac2c9fc09093c1d7a60f2909dc847db8e27756adca5af4f19cc23a0116c5c7947a77de07e8806e873b1045ef8ebcdd201a0808c12d02f99d2a6c988e69091c9a18ffde71e5f12af3d54ec4c6f5cd473faa3b6755dffcbf7c17cbcf54bd135aae67e606cd4bcbc9b8f4ed97e2a6d479261f37dc3cd671e6a39bd34b18f71cdd79dd0e0e14a7ca75d0b4bddfbcb18670b4c0d771ceab8c8e852e25c134a5ed342d77a283dd200eda7810fb3b0979ac7d794c635143c710de52ae6df514555f8df5a5c7ea5eefb4fa681e812be73454d27759663bb54fb62f7b15a472a133d3aca8216a7c4389ad0d96091ecc64204089ed4846a7bae68ff9bcdb633c99a92754edbc98e03b4f819a4fdcb859e316a918f0c79f55e9a3955dc97e1c6009a2f636f146471d82eaece9794629e7f4b790e261ec6b3eb9b0c77d02f96b27abbb7c8676af0223e6c5071a29436a25d54f79dfd22d44804ae507d9b9e3fc43aa1037acde803ee320eb8a01bbcc9057af2fa5f434951b864cdde897c0c5fd84f7319b067edee752072ac85013766e03b70032f9a81d7b991aa8983b83369167bc0865f606bff4f9dea59cb481e16a5fde7fbc340f09df7371aa751ae175a0ccba8707b116c057c338822a91e7d9934653a201e4adaae6ce48bf19503a57129a5bd977d12520699b72801da22b523de23bd59712cf92d045fa6f191530dc1e97ed4c18958e268953c9b8c323dcd6352a24321dab2481c5ae56cfc0c3e868d42c90966918bce357a4ac92eb8beb5dcaf2d270873ca9acea749c02c4d54861323bf7a9b78c18385bbef8306cdcaa1ae4cce94a3d068fae1114bdf8c032b403942df9e51f128cfecd0411de85b93c580c05202e8df08e55d6ebad7ae07b9e7e06916e74f73a6eab74226ecd4b6fd3d00aec13b40ebb2086e7a8805cf2e4927f0efd6dc01ccc12a8fced7f0cd38b11d2fa575c8a50a4a042264ad8da6419cc4db0be1df2da6b9cf610adbf3c732d0ece0d83738e002ed04d9d9399a969ce2dbb25ab3e6f807ac2bbb9fb761235e904f837ce4ce1492c92fd913746ff0ea3d050137288280ac58a7116ad66094991252b18281199c991e2f178cd1ada9715d149cc4a8083bf1251ec6c249d0bca28e16a93bb60e568e071231f0cf463c166a08fd06b25a51c305e14292dfe49105bde662d975b3832a4d45edf15a5872a29b80d577e75119e2ac3288f4d633e93100f6c5c7743a2fe10d92b54b6a7a73b4f3758b916a817647e36d67359d5996459c2c765fb48fe565827daea2dd2364b4d693ff8b6a78f3a846a23aace6e87234daae5a4e44ce6a4eefa562946b107b91c6e0d16a46893372e25de25473563db20e55ca45feec3e60e01b77c5d8aa7d434f20b5204b40e947e0db89fa4be62fa7c449bbedcab706929bb3e55d3a30e4eb91f965ff4d6b1d850eb86f66fdde2b390843bb0f1f2455d19cf6ae48858db232a07c6f8d2af194be05239b4b050456c7fef64901fed81686dbd37bab4e4b65b0480f405ee94d7b68d01dbbe918d1105edb8de720c41bdb8ebc22e5a249d175e4138fdfe1ae374cdc0cb5eb2a9ce68aa06ffee387bb093bcc3ac89d6e51d23017c78e398ed0eadbbbbf430d00049933226ac024a8b862f530e2b214b0f5b9a6facbaf5025da4008a6f918298e25e3f13f5684d0be100e496ca337c3867c72ebad8513f129eca6cf92cecc75b3a25371ade757a1336d2f583c684fccad2c116de799feced13d4e6fe54ba75d9eb2ad516a705fdf866a2c3cab505f4611fade2c974fb53992c9dc73c7bd1942bd5e076995f8b1aedbb7e2656789211d0cf0400fb80dd34facee3ccb1f910df17a3c4cc0832f8144a6c61b0471b2defcd4e5ab913993a1410cf8f0a6dfc2a28763231c719a060fcb7c251d0dd04488b931204909bb4d63dcc50fb344c83435dd9dcc02de7a9846c512610b4ad05afb1432bcc84667e7c50cb39b8fe70a50daf18ae74f1e74ce3e60c9ef9d2768e2dde133dc4630bf9d3b67d6e7031a35fb222544e4a596cf54e13e88c5e95d7a45fce71983d698868cc03bfcb81f29f0f59f3c3c99ba55a3fca45adb65641c97cd258407e02e2608651372f91bb4d3674ba9cf7559f6c266fa14105e736122b3f252fa483ac2176237fe6fdb49ff5f44834d9afc2d0a7d12f7359a037e6133db637d1fadbdc368292086da1be554fb5547b57b75806322563e1dc8293e991c9dbb2b08c3ca14b9900fb3d4b19fe7af62f54d4cc938bb054355835f9f1bb3ff89694687e4ad63f15d2c0f65cab9902a82eefcf8202f0e7442c3811eebd4240926652ad4261349b5011b04b6524d629ff8d57e866f47b12f0e56de0e1eb263967dd634569cd922b4cecccd8ebfb33d188048f089ca5cad669f8b2b12989af2dea8f22e17c78ec61b8ad2e4b12036fd2639770bd801b67a6148f68ba3c3a7c14af62bbe3caa9e6bfa7d6b7addd9bc404fc8471022941c7951587335481bb18eba1459fdbe706b139dbd3299643628c369c9bd1a8c78601eb346c8bcdf2dfb5848cbe7cb111178afe62a980b26c3e02520c6aa2ff2c3500145060088381d8914bd37cd977218a1a1c119f02cdca9568cf901e95288a776776614105f935b1d2c244ac344936ec406d79c831abce258e837b74672993532a4cd9755edae3182abf5821c001a0514c32e3c40a6c0bbca10ef18c7631c4e62600a4820ac495d18586711bba46b6b44e3525891f82f1b07b94369106da789b94acccace9849a3dcb11d5d18f221ba136668a3f357e0124befcb02decfbbe3ca5d30b3c1a7f7223b81dd81349b4e94d9fcd2491e034f3f439ec73b57d7f944271c386aead7c5243babc11d3913f9ace0b8bbdc44cd76d3b922962843feda5d28fe83db0c2f1ecbb4a5367f42a31601d2f2ae61223a2f863dbfc69424105f0895400704a9874d25493e5b23f7badbde43e2cee2e69c37fcbcfdec2e37d2f17619aa29837143c25c8c08d18d0cdc0f7418cb2e007b500a8930eb54d3acc3699de9ae12803add5a7c60a7985e40c0694129ded22d1e3b438cb3ab3466205708aaddfe1e300993967e014d478785aa7847296c5a18c00f44e6beaa43d026e6531bf01a0c056de944c7bb5c5f087da4165a26a7ebe1973adf0732acafa85244edba97f8da2452f333f743fc4a111250b887b92c351243c4464506203da2e5df3d8f6e5bb887fa3484cb8aa2ffbafa8645f8fb29271c21f1a2ea0ca1e027ba1246be7bad864a9bf7fa8f63f2232ff2a09c40ecbf0bea2a5721fd64a6d35e46c169318ca5e75f91593755bfb4cb9e95ea8ac0519bcbbac85158981b74ec97ce8626c64bbf5d9ccc92ec77c5040e0eb2545c52ce8cdf619f22c27c60d606900d77efad314b548246a4137442fdf5d15c0cd22ce4a25af1ae263593385872a97fb9605f6bc1ea08e10e5074435dcb273970584da0de76564d82a853a5ced4c990374c4951299936b2269c4de8a7fcdc77ad6dc93010799f608b0569027ea0f27741bafdf6a9c298d3f01306ce892f48ed84f9ab41fde67865d5af3989500c54163723e6c409c305de0de5356ddd8349e1483f37c79f0801d5129cebed36576b264f69a8519d21463739aae6432d0f87a1735d03893a45cfee68a907dc8cf444da060704e4e01c19b8bf76ed0033669f32112ea9e55e4dde71ccdb04d6e4400a237fd75d096f9f0afa1bf01433ec9225abc833078f079ba26a4376959a5b2c520d9ca185514267eb80bdfe7721a75549332379c2afdfac86cc762a4124198229e1bb157ffffffff488fb4b8ed1937c6a545b87b4322ab4c09528fb1d623f8c030a2ae661f7ca61e79a0fdf245c875be195afab65047f2a1486bcafdd294d8b999fe13b47674290b47cbaf77610aadcf1b2d082d4ccd8d6d0c4177cd6a1f2ef4f9fe62fc799602de01c0c43b086d0d791fe9e7e5d431e12931512f493dfa1adba3044643f51d3a465eb19ea58483c4ed50f3c9990503d8ec8810630ed92f2c551dc8f2df50c536e98c3226ffcf4269e16a5929db03129f25fedfef48d1d3de65c6e6f909cf5add64813069855b7c6af4a907978d286208bc0fc9d05fcc614045c37e276aeb50542379a54c2da97bd7b2ef2a9dd9e398ae8db72b2bb532df5059c0aac64f668873f4ddff3cbe9f5ffa828047c7b671328a67f65d18366f3ce2b4af07b11d3739fc781638190c011703e4e67568db4fed73bf10a5c8c400a63175959855ceca0690170b8aa30f2cb2f1ed7a6720e1ff9c2344edab25e3fce83445cbb133ffe96a6d1b7df249bc0347d2a18cff833d0a60fb66b62b45ff97f6b9a77c94ad7df76ec44d4c9a150ed3bdc8e1557ae0d944fdb6304f0f082fcd6e92ec626ba3a904a12d652b8a40cff66c24ba2e6c62a7fe2e2dbd47e626bf94d008ab44dd97951ca042fd06dc324625a9087c7a49da7683c0dafab6abfe2759c1f31c589fa11ca7fb776b2faa7835919c5aba5cf94f5ffe36caf578c02553509aec27e4594a18af99fbb96948437ad39565a44b665b10aaaf892de45f9db97ebd984d6a233a08b55f5c74395e3d7132382a0eb1f3221c4da272b1b4dc24beb08dbef0756b2ccbf08d3adf75fac5a8cc357fcbc5cefcde6e2fb550c5d490092bbe96b0ba0c6cd3a26312fd34afda8a832d762194b7776d0da41fdffb0802443a66a2bab07f7507b41e8bc70cb4d301774afdc5ea0f0cb91697e8a2ab7661df692f574e6d08fefcff866a397a3dae196b99ef76910e39a7a358abee25611db99169dc3e000c2e7d0c222f2ca24927942cc26cc7fdc9734e352570403f85ab81c08cd094bd0739ac545082aa1eae43102238a6207fe7ff7b92b95264bef277834fd89f24347839863103050d5f5a2a7e7c2c9dffc709572a08f76ace97ce0f2974dd65bf81b0e88b79300a0698d808a4510ce5fa55263303d8142bbeb57e22bb989c237a63d46cc8697b4cee8966cc4e5c8a70569e032357f7a5bf1a2fcebb6f6e1c9b073fb9abfb1b2ccf154b4755d7d0e22fc93b2102c9ebd9d34edfe95ee23ca164b00a0ccdaf8719a536e3e0ee77ad15b5902d70901bcf791e31f8824a6c5646140456011a975c26c49a9499f1c8ff4a2ef372b1f6a922e283526ebf09604d6a825ae3ad8c2cf0605bf3c0c7ed1c3cce733d3a66c35ac30bb926e64ac6bc41aab9da8b4a150e6444f92d0820da26629ad0cd4aee5648b5841df13d0a11af53a53618b913c92cbc62b0be887920e4e5f6d6ce51f1bf20adf098d6150a9f071512483d41c410335c4e1d14d714495804eb60259a7c669389a089cbfab430a8466db3e172c156dd7c0ea6c71870db1b0bf89ab228b7df70fe3370c5aeafb91ce848b155afe91cd3f1f35ff9ffffffffffffffe76e9ac956aba55ab374e801d394682f9aed752ab828484d0cad1c5a000000000000000000000000df55fa2976c2a42e1fb1332668248862e72e99333dde50937e4efcb69527c2d0c4fc73ffb760360a03a77172e083bfa1", @ANYRESDEC=r0, @ANYRES64], 0x1c9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x40, 0x0) write$bt_hci(r2, &(0x7f0000001100)={0x1, @io_capability_neg_reply={{0x434, 0x7}}}, 0xb) close(r1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:44:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @pin_code_neg_reply={{0x40e, 0x6}}}, 0xa) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000000200)=""/249, 0xf9}, {&(0x7f0000000300)=""/183, 0xb7}, {&(0x7f00000003c0)=""/252, 0xfc}], 0x5, &(0x7f0000000540)=""/182, 0xb6}}, {{&(0x7f0000000600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000780)=""/8, 0x8}, {&(0x7f00000007c0)=""/89, 0x59}, {&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000940)=""/111, 0x6f}, {&(0x7f00000009c0)=""/168, 0xa8}], 0x6, &(0x7f0000000b00)=""/253, 0xfd}, 0x280039a0}], 0x2, 0x2, &(0x7f0000000c80)={0x77359400}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x0, 0x0, 0x0, "c1716a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"}}}, 0x27) 16:44:43 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x1d) 16:44:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) lseek(r1, 0x7, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x1, 0x4, "699f9d", 0x40, 0x50}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x178) 16:44:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00}}}, 0x1d) 16:44:43 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) fsetxattr$security_selinux(r0, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRES64], 0x1c9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x40, 0x0) write$bt_hci(r2, &(0x7f0000001100)={0x1, @io_capability_neg_reply={{0x434, 0x7}}}, 0xb) close(r1) 16:44:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 16:44:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}}}, 0x178) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) 16:44:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x3) 16:44:43 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) fsetxattr$security_selinux(r0, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRES64], 0x1c9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x40, 0x0) close(r1) [ 3341.508645] Bluetooth: hci1: command 0x0401 tx timeout [ 3343.556687] Bluetooth: hci1: command 0x0401 tx timeout [ 3345.604634] Bluetooth: hci1: command 0x0401 tx timeout [ 3347.652534] Bluetooth: hci1: command 0x0401 tx timeout [ 3349.700642] Bluetooth: hci1: command 0x0401 tx timeout 16:44:53 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) fsetxattr$security_selinux(r0, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="de964094a7b996aa05fc50788ce0dbe8e0d9e6b39f450f9cccf60c0897604ef4316be73addcba49e8b0c93f0710e65dda9dd4cb36f960a33216dd7f128f35b3b3a1c4b1747dadb67d1edcc540b06fd90d17e7d8e0498470a60e73e62810887e4d95d8dab8520b540075d60299b3feef31830f1427d53a90f3437cacdebfcd6283ec934643f23eaaedb7d2b8f682246157920e7f7540439410d22fedc93e21a59c6e7987484d0940915759471414e18f77337b2536fa3f38f0456a948f58e934cd57166e44673bba32d7f7fdae95fe8eb1110b400fb36d76f53b977bc152c18ea61c29e828a093862119912fb2b9ada50c2d410d098ac2c9fc09093c1d7a60f2909dc847db8e27756adca5af4f19cc23a0116c5c7947a77de07e8806e873b1045ef8ebcdd201a0808c12d02f99d2a6c988e69091c9a18ffde71e5f12af3d54ec4c6f5cd473faa3b6755dffcbf7c17cbcf54bd135aae67e606cd4bcbc9b8f4ed97e2a6d479261f37dc3cd671e6a39bd34b18f71cdd79dd0e0e14a7ca75d0b4bddfbcb18670b4c0d771ceab8c8e852e25c134a5ed342d77a283dd200eda7810fb3b0979ac7d794c635143c710de52ae6df514555f8df5a5c7ea5eefb4fa681e812be73454d27759663bb54fb62f7b15a472a133d3aca8216a7c4389ad0d96091ecc64204089ed4846a7bae68ff9bcdb633c99a92754edbc98e03b4f819a4fdcb859e316a918f0c79f55e9a3955dc97e1c6009a2f636f146471d82eaece9794629e7f4b790e261ec6b3eb9b0c77d02f96b27abbb7c8676af0223e6c5071a29436a25d54f79dfd22d44804ae507d9b9e3fc43aa1037acde803ee320eb8a01bbcc9057af2fa5f434951b864cdde897c0c5fd84f7319b067edee752072ac85013766e03b70032f9a81d7b991aa8983b83369167bc0865f606bff4f9dea59cb481e16a5fde7fbc340f09df7371aa751ae175a0ccba8707b116c057c338822a91e7d9934653a201e4adaae6ce48bf19503a57129a5bd977d12520699b72801da22b523de23bd59712cf92d045fa6f191530dc1e97ed4c18958e268953c9b8c323dcd6352a24321dab2481c5ae56cfc0c3e868d42c90966918bce357a4ac92eb8beb5dcaf2d270873ca9acea749c02c4d54861323bf7a9b78c18385bbef8306cdcaa1ae4cce94a3d068fae1114bdf8c032b403942df9e51f128cfecd0411de85b93c580c05202e8df08e55d6ebad7ae07b9e7e06916e74f73a6eab74226ecd4b6fd3d00aec13b40ebb2086e7a8805cf2e4927f0efd6dc01ccc12a8fced7f0cd38b11d2fa575c8a50a4a042264ad8da6419cc4db0be1df2da6b9cf610adbf3c732d0ece0d83738e002ed04d9d9399a969ce2dbb25ab3e6f807ac2bbb9fb761235e904f837ce4ce1492c92fd913746ff0ea3d050137288280ac58a7116ad66094991252b18281199c991e2f178cd1ada9715d149cc4a8083bf1251ec6c249d0bca28e16a93bb60e568e071231f0cf463c166a08fd06b25a51c305e14292dfe49105bde662d975b3832a4d45edf15a5872a29b80d577e75119e2ac3288f4d633e93100f6c5c7743a2fe10d92b54b6a7a73b4f3758b916a817647e36d67359d5996459c2c765fb48fe565827daea2dd2364b4d693ff8b6a78f3a846a23aace6e87234daae5a4e44ce6a4eefa562946b107b91c6e0d16a46893372e25de25473563db20e55ca45feec3e60e01b77c5d8aa7d434f20b5204b40e947e0db89fa4be62fa7c449bbedcab706929bb3e55d3a30e4eb91f965ff4d6b1d850eb86f66fdde2b390843bb0f1f2455d19cf6ae48858db232a07c6f8d2af194be05239b4b050456c7fef64901fed81686dbd37bab4e4b65b0480f405ee94d7b68d01dbbe918d1105edb8de720c41bdb8ebc22e5a249d175e4138fdfe1ae374cdc0cb5eb2a9ce68aa06ffee387bb093bcc3ac89d6e51d23017c78e398ed0eadbbbbf430d00049933226ac024a8b862f530e2b214b0f5b9a6facbaf5025da4008a6f918298e25e3f13f5684d0be100e496ca337c3867c72ebad8513f129eca6cf92cecc75b3a25371ade757a1336d2f583c684fccad2c116de799feced13d4e6fe54ba75d9eb2ad516a705fdf866a2c3cab505f4611fade2c974fb53992c9dc73c7bd1942bd5e076995f8b1aedbb7e2656789211d0cf0400fb80dd34facee3ccb1f910df17a3c4cc0832f8144a6c61b0471b2defcd4e5ab913993a1410cf8f0a6dfc2a28763231c719a060fcb7c251d0dd04488b931204909bb4d63dcc50fb344c83435dd9dcc02de7a9846c512610b4ad05afb1432bcc84667e7c50cb39b8fe70a50daf18ae74f1e74ce3e60c9ef9d2768e2dde133dc4630bf9d3b67d6e7031a35fb222544e4a596cf54e13e88c5e95d7a45fce71983d698868cc03bfcb81f29f0f59f3c3c99ba55a3fca45adb65641c97cd258407e02e2608651372f91bb4d3674ba9cf7559f6c266fa14105e736122b3f252fa483ac2176237fe6fdb49ff5f44834d9afc2d0a7d12f7359a037e6133db637d1fadbdc368292086da1be554fb5547b57b75806322563e1dc8293e991c9dbb2b08c3ca14b9900fb3d4b19fe7af62f54d4cc938bb054355835f9f1bb3ff89694687e4ad63f15d2c0f65cab9902a82eefcf8202f0e7442c3811eebd4240926652ad4261349b5011b04b6524d629ff8d57e866f47b12f0e56de0e1eb263967dd634569cd922b4cecccd8ebfb33d188048f089ca5cad669f8b2b12989af2dea8f22e17c78ec61b8ad2e4b12036fd2639770bd801b67a6148f68ba3c3a7c14af62bbe3caa9e6bfa7d6b7addd9bc404fc8471022941c7951587335481bb18eba1459fdbe706b139dbd3299643628c369c9bd1a8c78601eb346c8bcdf2dfb5848cbe7cb111178afe62a980b26c3e02520c6aa2ff2c3500145060088381d8914bd37cd977218a1a1c119f02cdca9568cf901e95288a776776614105f935b1d2c244ac344936ec406d79c831abce258e837b74672993532a4cd9755edae3182abf5821c001a0514c32e3c40a6c0bbca10ef18c7631c4e62600a4820ac495d18586711bba46b6b44e3525891f82f1b07b94369106da789b94acccace9849a3dcb11d5d18f221ba136668a3f357e0124befcb02decfbbe3ca5d30b3c1a7f7223b81dd81349b4e94d9fcd2491e034f3f439ec73b57d7f944271c386aead7c5243babc11d3913f9ace0b8bbdc44cd76d3b922962843feda5d28fe83db0c2f1ecbb4a5367f42a31601d2f2ae61223a2f863dbfc69424105f0895400704a9874d25493e5b23f7badbde43e2cee2e69c37fcbcfdec2e37d2f17619aa29837143c25c8c08d18d0cdc0f7418cb2e007b500a8930eb54d3acc3699de9ae12803add5a7c60a7985e40c0694129ded22d1e3b438cb3ab3466205708aaddfe1e300993967e014d478785aa7847296c5a18c00f44e6beaa43d026e6531bf01a0c056de944c7bb5c5f087da4165a26a7ebe1973adf0732acafa85244edba97f8da2452f333f743fc4a111250b887b92c351243c4464506203da2e5df3d8f6e5bb887fa3484cb8aa2ffbafa8645f8fb29271c21f1a2ea0ca1e027ba1246be7bad864a9bf7fa8f63f2232ff2a09c40ecbf0bea2a5721fd64a6d35e46c169318ca5e75f91593755bfb4cb9e95ea8ac0519bcbbac85158981b74ec97ce8626c64bbf5d9ccc92ec77c5040e0eb2545c52ce8cdf619f22c27c60d606900d77efad314b548246a4137442fdf5d15c0cd22ce4a25af1ae263593385872a97fb9605f6bc1ea08e10e5074435dcb273970584da0de76564d82a853a5ced4c990374c4951299936b2269c4de8a7fcdc77ad6dc93010799f608b0569027ea0f27741bafdf6a9c298d3f01306ce892f48ed84f9ab41fde67865d5af3989500c54163723e6c409c305de0de5356ddd8349e1483f37c79f0801d5129cebed36576b264f69a8519d21463739aae6432d0f87a1735d03893a45cfee68a907dc8cf444da060704e4e01c19b8bf76ed0033669f32112ea9e55e4dde71ccdb04d6e4400a237fd75d096f9f0afa1bf01433ec9225abc833078f079ba26a4376959a5b2c520d9ca185514267eb80bdfe7721a75549332379c2afdfac86cc762a4124198229e1bb157ffffffff488fb4b8ed1937c6a545b87b4322ab4c09528fb1d623f8c030a2ae661f7ca61e79a0fdf245c875be195afab65047f2a1486bcafdd294d8b999fe13b47674290b47cbaf77610aadcf1b2d082d4ccd8d6d0c4177cd6a1f2ef4f9fe62fc799602de01c0c43b086d0d791fe9e7e5d431e12931512f493dfa1adba3044643f51d3a465eb19ea58483c4ed50f3c9990503d8ec8810630ed92f2c551dc8f2df50c536e98c3226ffcf4269e16a5929db03129f25fedfef48d1d3de65c6e6f909cf5add64813069855b7c6af4a907978d286208bc0fc9d05fcc614045c37e276aeb50542379a54c2da97bd7b2ef2a9dd9e398ae8db72b2bb532df5059c0aac64f668873f4ddff3cbe9f5ffa828047c7b671328a67f65d18366f3ce2b4af07b11d3739fc781638190c011703e4e67568db4fed73bf10a5c8c400a63175959855ceca0690170b8aa30f2cb2f1ed7a6720e1ff9c2344edab25e3fce83445cbb133ffe96a6d1b7df249bc0347d2a18cff833d0a60fb66b62b45ff97f6b9a77c94ad7df76ec44d4c9a150ed3bdc8e1557ae0d944fdb6304f0f082fcd6e92ec626ba3a904a12d652b8a40cff66c24ba2e6c62a7fe2e2dbd47e626bf94d008ab44dd97951ca042fd06dc324625a9087c7a49da7683c0dafab6abfe2759c1f31c589fa11ca7fb776b2faa7835919c5aba5cf94f5ffe36caf578c02553509aec27e4594a18af99fbb96948437ad39565a44b665b10aaaf892de45f9db97ebd984d6a233a08b55f5c74395e3d7132382a0eb1f3221c4da272b1b4dc24beb08dbef0756b2ccbf08d3adf75fac5a8cc357fcbc5cefcde6e2fb550c5d490092bbe96b0ba0c6cd3a26312fd34afda8a832d762194b7776d0da41fdffb0802443a66a2bab07f7507b41e8bc70cb4d301774afdc5ea0f0cb91697e8a2ab7661df692f574e6d08fefcff866a397a3dae196b99ef76910e39a7a358abee25611db99169dc3e000c2e7d0c222f2ca24927942cc26cc7fdc9734e352570403f85ab81c08cd094bd0739ac545082aa1eae43102238a6207fe7ff7b92b95264bef277834fd89f24347839863103050d5f5a2a7e7c2c9dffc709572a08f76ace97ce0f2974dd65bf81b0e88b79300a0698d808a4510ce5fa55263303d8142bbeb57e22bb989c237a63d46cc8697b4cee8966cc4e5c8a70569e032357f7a5bf1a2fcebb6f6e1c9b073fb9abfb1b2ccf154b4755d7d0e22fc93b2102c9ebd9d34edfe95ee23ca164b00a0ccdaf8719a536e3e0ee77ad15b5902d70901bcf791e31f8824a6c5646140456011a975c26c49a9499f1c8ff4a2ef372b1f6a922e283526ebf09604d6a825ae3ad8c2cf0605bf3c0c7ed1c3cce733d3a66c35ac30bb926e64ac6bc41aab9da8b4a150e6444f92d0820da26629ad0cd4aee5648b5841df13d0a11af53a53618b913c92cbc62b0be887920e4e5f6d6ce51f1bf20adf098d6150a9f071512483d41c410335c4e1d14d714495804eb60259a7c669389a089cbfab430a8466db3e172c156dd7c0ea6c71870db1b0bf89ab228b7df70fe3370c5aeafb91ce848b155afe91cd3f1f35ff9ffffffffffffffe76e9ac956aba55ab374e801d394682f9aed752ab828484d0cad1c5a000000000000000000000000df55fa2976c2a42e1fb1332668248862e72e99333dde50937e4efcb69527c2d0c4fc73ffb760360a03a77172e083bfa1", @ANYRESDEC=r0, @ANYRES64], 0x1c9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x4) close(r1) 16:44:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="013720230000000100712a796a67f35052a6102486dd264d93aa2bfd80b42cf15e1fd37601ce70"], 0x27) 16:44:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x3, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20000010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x65}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005}, 0x11) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x62}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x20044001) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x56d180) 16:44:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x178) 16:44:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8}}}, 0xfffffffffffffee8) 16:44:53 executing program 2: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x230, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x930}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x19}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80000001, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1472c62b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10000003}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x20000000}, 0x64) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}}}, 0x7) 16:44:53 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcdbd, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) copy_file_range(r0, &(0x7f0000000000)=0xe14, r1, &(0x7f0000000100), 0x6, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x2000, 0x9, 0x10}, 0x18) r4 = perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x9, 0x1, 0x7f, 0x0, 0x7, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0x7}, 0x12100, 0x263ec117, 0x40, 0xe, 0x4, 0x6, 0x1, 0x0, 0x4}, 0x0, 0x9, r3, 0xa) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000280)={{r3}, "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"}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) 16:44:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x1d) 16:44:53 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) fsetxattr$security_selinux(r0, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="de964094a7b996aa05fc50788ce0dbe8e0d9e6b39f450f9cccf60c0897604ef4316be73addcba49e8b0c93f0710e65dda9dd4cb36f960a33216dd7f128f35b3b3a1c4b1747dadb67d1edcc540b06fd90d17e7d8e0498470a60e73e62810887e4d95d8dab8520b540075d60299b3feef31830f1427d53a90f3437cacdebfcd6283ec934643f23eaaedb7d2b8f682246157920e7f7540439410d22fedc93e21a59c6e7987484d0940915759471414e18f77337b2536fa3f38f0456a948f58e934cd57166e44673bba32d7f7fdae95fe8eb1110b400fb36d76f53b977bc152c18ea61c29e828a093862119912fb2b9ada50c2d410d098ac2c9fc09093c1d7a60f2909dc847db8e27756adca5af4f19cc23a0116c5c7947a77de07e8806e873b1045ef8ebcdd201a0808c12d02f99d2a6c988e69091c9a18ffde71e5f12af3d54ec4c6f5cd473faa3b6755dffcbf7c17cbcf54bd135aae67e606cd4bcbc9b8f4ed97e2a6d479261f37dc3cd671e6a39bd34b18f71cdd79dd0e0e14a7ca75d0b4bddfbcb18670b4c0d771ceab8c8e852e25c134a5ed342d77a283dd200eda7810fb3b0979ac7d794c635143c710de52ae6df514555f8df5a5c7ea5eefb4fa681e812be73454d27759663bb54fb62f7b15a472a133d3aca8216a7c4389ad0d96091ecc64204089ed4846a7bae68ff9bcdb633c99a92754edbc98e03b4f819a4fdcb859e316a918f0c79f55e9a3955dc97e1c6009a2f636f146471d82eaece9794629e7f4b790e261ec6b3eb9b0c77d02f96b27abbb7c8676af0223e6c5071a29436a25d54f79dfd22d44804ae507d9b9e3fc43aa1037acde803ee320eb8a01bbcc9057af2fa5f434951b864cdde897c0c5fd84f7319b067edee752072ac85013766e03b70032f9a81d7b991aa8983b83369167bc0865f606bff4f9dea59cb481e16a5fde7fbc340f09df7371aa751ae175a0ccba8707b116c057c338822a91e7d9934653a201e4adaae6ce48bf19503a57129a5bd977d12520699b72801da22b523de23bd59712cf92d045fa6f191530dc1e97ed4c18958e268953c9b8c323dcd6352a24321dab2481c5ae56cfc0c3e868d42c90966918bce357a4ac92eb8beb5dcaf2d270873ca9acea749c02c4d54861323bf7a9b78c18385bbef8306cdcaa1ae4cce94a3d068fae1114bdf8c032b403942df9e51f128cfecd0411de85b93c580c05202e8df08e55d6ebad7ae07b9e7e06916e74f73a6eab74226ecd4b6fd3d00aec13b40ebb2086e7a8805cf2e4927f0efd6dc01ccc12a8fced7f0cd38b11d2fa575c8a50a4a042264ad8da6419cc4db0be1df2da6b9cf610adbf3c732d0ece0d83738e002ed04d9d9399a969ce2dbb25ab3e6f807ac2bbb9fb761235e904f837ce4ce1492c92fd913746ff0ea3d050137288280ac58a7116ad66094991252b18281199c991e2f178cd1ada9715d149cc4a8083bf1251ec6c249d0bca28e16a93bb60e568e071231f0cf463c166a08fd06b25a51c305e14292dfe49105bde662d975b3832a4d45edf15a5872a29b80d577e75119e2ac3288f4d633e93100f6c5c7743a2fe10d92b54b6a7a73b4f3758b916a817647e36d67359d5996459c2c765fb48fe565827daea2dd2364b4d693ff8b6a78f3a846a23aace6e87234daae5a4e44ce6a4eefa562946b107b91c6e0d16a46893372e25de25473563db20e55ca45feec3e60e01b77c5d8aa7d434f20b5204b40e947e0db89fa4be62fa7c449bbedcab706929bb3e55d3a30e4eb91f965ff4d6b1d850eb86f66fdde2b390843bb0f1f2455d19cf6ae48858db232a07c6f8d2af194be05239b4b050456c7fef64901fed81686dbd37bab4e4b65b0480f405ee94d7b68d01dbbe918d1105edb8de720c41bdb8ebc22e5a249d175e4138fdfe1ae374cdc0cb5eb2a9ce68aa06ffee387bb093bcc3ac89d6e51d23017c78e398ed0eadbbbbf430d00049933226ac024a8b862f530e2b214b0f5b9a6facbaf5025da4008a6f918298e25e3f13f5684d0be100e496ca337c3867c72ebad8513f129eca6cf92cecc75b3a25371ade757a1336d2f583c684fccad2c116de799feced13d4e6fe54ba75d9eb2ad516a705fdf866a2c3cab505f4611fade2c974fb53992c9dc73c7bd1942bd5e076995f8b1aedbb7e2656789211d0cf0400fb80dd34facee3ccb1f910df17a3c4cc0832f8144a6c61b0471b2defcd4e5ab913993a1410cf8f0a6dfc2a28763231c719a060fcb7c251d0dd04488b931204909bb4d63dcc50fb344c83435dd9dcc02de7a9846c512610b4ad05afb1432bcc84667e7c50cb39b8fe70a50daf18ae74f1e74ce3e60c9ef9d2768e2dde133dc4630bf9d3b67d6e7031a35fb222544e4a596cf54e13e88c5e95d7a45fce71983d698868cc03bfcb81f29f0f59f3c3c99ba55a3fca45adb65641c97cd258407e02e2608651372f91bb4d3674ba9cf7559f6c266fa14105e736122b3f252fa483ac2176237fe6fdb49ff5f44834d9afc2d0a7d12f7359a037e6133db637d1fadbdc368292086da1be554fb5547b57b75806322563e1dc8293e991c9dbb2b08c3ca14b9900fb3d4b19fe7af62f54d4cc938bb054355835f9f1bb3ff89694687e4ad63f15d2c0f65cab9902a82eefcf8202f0e7442c3811eebd4240926652ad4261349b5011b04b6524d629ff8d57e866f47b12f0e56de0e1eb263967dd634569cd922b4cecccd8ebfb33d188048f089ca5cad669f8b2b12989af2dea8f22e17c78ec61b8ad2e4b12036fd2639770bd801b67a6148f68ba3c3a7c14af62bbe3caa9e6bfa7d6b7addd9bc404fc8471022941c7951587335481bb18eba1459fdbe706b139dbd3299643628c369c9bd1a8c78601eb346c8bcdf2dfb5848cbe7cb111178afe62a980b26c3e02520c6aa2ff2c3500145060088381d8914bd37cd977218a1a1c119f02cdca9568cf901e95288a776776614105f935b1d2c244ac344936ec406d79c831abce258e837b74672993532a4cd9755edae3182abf5821c001a0514c32e3c40a6c0bbca10ef18c7631c4e62600a4820ac495d18586711bba46b6b44e3525891f82f1b07b94369106da789b94acccace9849a3dcb11d5d18f221ba136668a3f357e0124befcb02decfbbe3ca5d30b3c1a7f7223b81dd81349b4e94d9fcd2491e034f3f439ec73b57d7f944271c386aead7c5243babc11d3913f9ace0b8bbdc44cd76d3b922962843feda5d28fe83db0c2f1ecbb4a5367f42a31601d2f2ae61223a2f863dbfc69424105f0895400704a9874d25493e5b23f7badbde43e2cee2e69c37fcbcfdec2e37d2f17619aa29837143c25c8c08d18d0cdc0f7418cb2e007b500a8930eb54d3acc3699de9ae12803add5a7c60a7985e40c0694129ded22d1e3b438cb3ab3466205708aaddfe1e300993967e014d478785aa7847296c5a18c00f44e6beaa43d026e6531bf01a0c056de944c7bb5c5f087da4165a26a7ebe1973adf0732acafa85244edba97f8da2452f333f743fc4a111250b887b92c351243c4464506203da2e5df3d8f6e5bb887fa3484cb8aa2ffbafa8645f8fb29271c21f1a2ea0ca1e027ba1246be7bad864a9bf7fa8f63f2232ff2a09c40ecbf0bea2a5721fd64a6d35e46c169318ca5e75f91593755bfb4cb9e95ea8ac0519bcbbac85158981b74ec97ce8626c64bbf5d9ccc92ec77c5040e0eb2545c52ce8cdf619f22c27c60d606900d77efad314b548246a4137442fdf5d15c0cd22ce4a25af1ae263593385872a97fb9605f6bc1ea08e10e5074435dcb273970584da0de76564d82a853a5ced4c990374c4951299936b2269c4de8a7fcdc77ad6dc93010799f608b0569027ea0f27741bafdf6a9c298d3f01306ce892f48ed84f9ab41fde67865d5af3989500c54163723e6c409c305de0de5356ddd8349e1483f37c79f0801d5129cebed36576b264f69a8519d21463739aae6432d0f87a1735d03893a45cfee68a907dc8cf444da060704e4e01c19b8bf76ed0033669f32112ea9e55e4dde71ccdb04d6e4400a237fd75d096f9f0afa1bf01433ec9225abc833078f079ba26a4376959a5b2c520d9ca185514267eb80bdfe7721a75549332379c2afdfac86cc762a4124198229e1bb157ffffffff488fb4b8ed1937c6a545b87b4322ab4c09528fb1d623f8c030a2ae661f7ca61e79a0fdf245c875be195afab65047f2a1486bcafdd294d8b999fe13b47674290b47cbaf77610aadcf1b2d082d4ccd8d6d0c4177cd6a1f2ef4f9fe62fc799602de01c0c43b086d0d791fe9e7e5d431e12931512f493dfa1adba3044643f51d3a465eb19ea58483c4ed50f3c9990503d8ec8810630ed92f2c551dc8f2df50c536e98c3226ffcf4269e16a5929db03129f25fedfef48d1d3de65c6e6f909cf5add64813069855b7c6af4a907978d286208bc0fc9d05fcc614045c37e276aeb50542379a54c2da97bd7b2ef2a9dd9e398ae8db72b2bb532df5059c0aac64f668873f4ddff3cbe9f5ffa828047c7b671328a67f65d18366f3ce2b4af07b11d3739fc781638190c011703e4e67568db4fed73bf10a5c8c400a63175959855ceca0690170b8aa30f2cb2f1ed7a6720e1ff9c2344edab25e3fce83445cbb133ffe96a6d1b7df249bc0347d2a18cff833d0a60fb66b62b45ff97f6b9a77c94ad7df76ec44d4c9a150ed3bdc8e1557ae0d944fdb6304f0f082fcd6e92ec626ba3a904a12d652b8a40cff66c24ba2e6c62a7fe2e2dbd47e626bf94d008ab44dd97951ca042fd06dc324625a9087c7a49da7683c0dafab6abfe2759c1f31c589fa11ca7fb776b2faa7835919c5aba5cf94f5ffe36caf578c02553509aec27e4594a18af99fbb96948437ad39565a44b665b10aaaf892de45f9db97ebd984d6a233a08b55f5c74395e3d7132382a0eb1f3221c4da272b1b4dc24beb08dbef0756b2ccbf08d3adf75fac5a8cc357fcbc5cefcde6e2fb550c5d490092bbe96b0ba0c6cd3a26312fd34afda8a832d762194b7776d0da41fdffb0802443a66a2bab07f7507b41e8bc70cb4d301774afdc5ea0f0cb91697e8a2ab7661df692f574e6d08fefcff866a397a3dae196b99ef76910e39a7a358abee25611db99169dc3e000c2e7d0c222f2ca24927942cc26cc7fdc9734e352570403f85ab81c08cd094bd0739ac545082aa1eae43102238a6207fe7ff7b92b95264bef277834fd89f24347839863103050d5f5a2a7e7c2c9dffc709572a08f76ace97ce0f2974dd65bf81b0e88b79300a0698d808a4510ce5fa55263303d8142bbeb57e22bb989c237a63d46cc8697b4cee8966cc4e5c8a70569e032357f7a5bf1a2fcebb6f6e1c9b073fb9abfb1b2ccf154b4755d7d0e22fc93b2102c9ebd9d34edfe95ee23ca164b00a0ccdaf8719a536e3e0ee77ad15b5902d70901bcf791e31f8824a6c5646140456011a975c26c49a9499f1c8ff4a2ef372b1f6a922e283526ebf09604d6a825ae3ad8c2cf0605bf3c0c7ed1c3cce733d3a66c35ac30bb926e64ac6bc41aab9da8b4a150e6444f92d0820da26629ad0cd4aee5648b5841df13d0a11af53a53618b913c92cbc62b0be887920e4e5f6d6ce51f1bf20adf098d6150a9f071512483d41c410335c4e1d14d714495804eb60259a7c669389a089cbfab430a8466db3e172c156dd7c0ea6c71870db1b0bf89ab228b7df70fe3370c5aeafb91ce848b155afe91cd3f1f35ff9ffffffffffffffe76e9ac956aba55ab374e801d394682f9aed752ab828484d0cad1c5a000000000000000000000000df55fa2976c2a42e1fb1332668248862e72e99333dde50937e4efcb69527c2d0c4fc73ffb760360a03a77172e083bfa1", @ANYRESDEC=r0, @ANYRES64], 0x1c9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r1) 16:44:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x4, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x5}}}, 0x1d) 16:44:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0137202300000000c1716a796a67f35052a61024a6dd264d93aa2bfd80b42cf15e1fd37601ce70"], 0x27) 16:44:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x34, r3, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) 16:44:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x0, 0x0, 0x0, @none}}}, 0x404) 16:44:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x7, @read_remote_ext_features={{0x41c, 0x3}, {0x0, 0x1}}}, 0x7) 16:44:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$FIONCLEX(r1, 0x5450) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6ce1734d6acaa99b17b364e40b00"], 0x178) [ 3351.748589] Bluetooth: hci1: command 0x0401 tx timeout [ 3353.796624] Bluetooth: hci1: command 0x0401 tx timeout [ 3355.844646] Bluetooth: hci1: command 0x0401 tx timeout [ 3357.892603] Bluetooth: hci1: command 0x0401 tx timeout [ 3359.940607] Bluetooth: hci1: command 0x0401 tx timeout [ 3360.683062] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 3361.988565] Bluetooth: hci1: command 0x0401 tx timeout [ 3364.036622] Bluetooth: hci1: command 0x0401 tx timeout BUG: memory leak unreferenced object 0xffff888013d7a900 (size 184): comm "syz-executor.7", pid 17185, jiffies 4297910501 hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 7cc9c7f6): kmem_cache_alloc_noprof+0x42f/0x690 prepare_creds+0x2c/0x7e0 copy_creds+0x7a/0xa20 copy_process+0xf59/0x7410 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888013e6fb00 (size 128): comm "syz-executor.7", pid 17185, jiffies 4297910501 hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 ................ backtrace (crc 55dd802a): __kmalloc_noprof+0x426/0x680 security_prepare_creds+0x101/0x160 prepare_creds+0x579/0x7e0 copy_creds+0x7a/0xa20 copy_process+0xf59/0x7410 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888013d2ea80 (size 288): comm "syz-executor.7", pid 17185, jiffies 4297910518 hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 ad 4e ad de .............N.. ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ backtrace (crc b209d9e4): kmem_cache_alloc_noprof+0x42f/0x690 alloc_pid+0xd5/0x1100 copy_process+0x3bd1/0x7410 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88801a397000 (size 2048): comm "syz-executor.7", pid 23403, jiffies 4297910579 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1f 00 03 40 00 00 00 00 00 00 00 00 00 00 00 00 ...@............ backtrace (crc 74716886): __kmalloc_noprof+0x426/0x680 sk_prot_alloc+0x157/0x280 sk_alloc+0x34/0xc60 bt_sock_alloc+0x3a/0x3b0 hci_sock_create+0xb2/0x170 bt_sock_create+0x15d/0x2c0 __sock_create+0x369/0x810 __sys_socket+0x145/0x260 __x64_sys_socket+0x73/0xb0 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88800d8842c0 (size 32): comm "syz-executor.7", pid 23403, jiffies 4297910579 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01 00 00 00 03 00 00 00 4b 00 00 00 00 00 00 00 ........K....... backtrace (crc ad019dda): __kmalloc_noprof+0x426/0x680 security_sk_alloc+0x101/0x160 sk_prot_alloc+0x20b/0x280 sk_alloc+0x34/0xc60 bt_sock_alloc+0x3a/0x3b0 hci_sock_create+0xb2/0x170 bt_sock_create+0x15d/0x2c0 __sock_create+0x369/0x810 __sys_socket+0x145/0x260 __x64_sys_socket+0x73/0xb0 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888013d5d640 (size 232): comm "syz-executor.7", pid 23403, jiffies 4297910580 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 70 39 1a 80 88 ff ff .........p9..... backtrace (crc d37d5644): kmem_cache_alloc_node_noprof+0x40a/0x6b0 __alloc_skb+0x2ab/0x370 alloc_skb_with_frags+0x8f/0x7c0 sock_alloc_send_pskb+0x7cb/0x950 hci_sock_sendmsg+0x190/0x2270 sock_write_iter+0x57e/0x610 vfs_write+0xbe9/0x1150 ksys_write+0x1ef/0x240 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: leak checking failed [ 3366.084681] Bluetooth: hci1: command 0x0401 tx timeout [ 3368.132621] Bluetooth: hci1: command 0x0401 tx timeout [ 3370.180636] Bluetooth: hci1: command 0x0401 tx timeout [ 3372.228773] Bluetooth: hci1: command 0x0401 tx timeout [ 3374.276715] Bluetooth: hci1: command 0x0401 tx timeout VM DIAGNOSIS: 16:45:08 Registers: info registers vcpu 0 RAX=00000000011d5dd3 RBX=0000000000000000 RCX=ffffffff84c61db7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814ca6a0 RBP=dffffc0000000000 RSP=ffffffff85c07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff86648150 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c60aae RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e53ed000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb5a1053350 CR3=000000000d659000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=31636e75662e6e75522e6c697475736f XMM03=00000000000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=2f2e8541378e566644b36c0f32d211e2 XMM09=95539d12acef1567173d69e4d91aaa9c XMM10=a9f52c9277d475ca469902f4bfa316ce XMM11=4103500d22252461c778c986d2fdc314 XMM12=5033ddb9f15ccdd25f1e05abd3839f48 XMM13=f5f332ff0b303cf17d4c1870cf3694da XMM14=264b81a727ab38563bb5f8e3143702fd XMM15=0186d081e64112867863e480af102940 info registers vcpu 1 RAX=000000000105e0ad RBX=0000000000000001 RCX=ffffffff84c61db7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814ca6a0 RBP=dffffc0000000000 RSP=ffff8880096efe58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff86648150 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c60aae RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e54ed000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe46665da8 CR3=000000000d659000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004159e11800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000